<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>question How to manage Hive warehouse HDFS directory permission? in Support Questions</title>
    <link>https://community.cloudera.com/t5/Support-Questions/How-to-manage-Hive-warehouse-HDFS-directory-permission/m-p/189267#M151360</link>
    <description>&lt;P&gt;I have a HDP-2.6 cluster. I would like to control access to Hive tables through Ranger. I would also like to run my queries as an end-user. I followed HDP documentation of Ranger and set up 000 permission for directory /apps/warehouse/hive.&lt;/P&gt;&lt;P&gt;What I noticed while working is, Ranger policies doesn't solely work on policies created for Hive(database and tables). Though if a user has WRITE permission defined in Ranger policy, it still needs WRITE permission for the corresponding table's directory in HDFS. If my database has 1000+ tables and a user needs WRITE permission only for 200 tables, then I have to create ranger HDFS policy(s) for those 200 directories with WRITE permission to the user.&lt;/P&gt;&lt;P&gt;I can give WRITE permission at a database level however, I am worried about a possibility for user removes files of other tables from command line.&lt;/P&gt;</description>
    <pubDate>Tue, 18 Jul 2017 21:22:11 GMT</pubDate>
    <dc:creator>antonyshajin</dc:creator>
    <dc:date>2017-07-18T21:22:11Z</dc:date>
  </channel>
</rss>

