question Re: Managing Hive UDFs Using Ranger in Support Questions

Managing Hive UDFs Using Ranger

pminovic — Wed, 17 Feb 2016 14:17:56 GMT

Which Hive permissions do I need to set if I want to allow some users to use a certain UDF? Available Hive permissions are: create, drop, alter, select, update, index, lock but what I need for UDF is a kind of "allow" . Also, do I have to set "Delegate admin"?

Re: Managing Hive UDFs Using Ranger

amcbarnett — Mon, 19 Aug 2019 07:50:50 GMT

This is Hive UDF Allow in Sandbox. And no you do not have to set Delegate Admin.

Re: Managing Hive UDFs Using Ranger

pminovic — Wed, 17 Feb 2016 14:30:22 GMT

@Ancil McBarnett Thanks for a quick reply. My question is do I have to set all those permissions at the bottom? And in this screenshot "Delegate admin" is checked.

Re: Managing Hive UDFs Using Ranger

amcbarnett — Wed, 17 Feb 2016 14:39:28 GMT

if you just want to execute it, select is only needed. Remember UDFs are used in DDL and DML in a Hive Statement. So Select means you can use a UDF in a Select Statement in SQL.

Re: Managing Hive UDFs Using Ranger

pminovic — Wed, 17 Feb 2016 14:52:12 GMT

Okay, that makes sense: Accepted!

Re: Managing Hive UDFs Using Ranger

vvvvvdev — Mon, 19 Aug 2019 07:50:43 GMT

Hi, I have hive.server2.enable.doAs set to true.

I have created a hive policy for qaadmin user to have access to only initcap() UDF which is builtin Hive UDF. But qaadmin user can access other built in UDFs too which user should not have access as per Hive Policy.

Note- qaadmin is only part of this policy.

Please help me how to make it work ?