https://community.cloudera.com/t5/Support-Questions/hive%E5%A4%96%E9%83%A8%E8%A1%A8%E7%9B%AE%E5%BD%95%E6%9D%83%E9%99%90%E9%97%AE%E9%A2%98/m-p/336496#M232270 <P>English Translation:&nbsp;</P> <P>&nbsp;</P> <P>Title: hive external table directory permission problem</P> <P><BR />The default permission of the external warehouse directory of hive in the CDP cluster is 1777, while the internal warehouse directory is 0770. This will cause a problem that any user in the external warehouse directory of hive can write data. Is it just the design or is it a tower issue?</P> Thu, 17 Feb 2022 09:12:58 GMT VidyaSargur 2022-02-17T09:12:58Z https://community.cloudera.com/t5/Support-Questions/hive%E5%A4%96%E9%83%A8%E8%A1%A8%E7%9B%AE%E5%BD%95%E6%9D%83%E9%99%90%E9%97%AE%E9%A2%98/m-p/336483#M232262 <P>在CDP集群hive的外部仓库目录权限默认为1777，而内部仓库目录为0770，这样会出现一个问题，hive的外部仓库目录任何用户都可以写入数据问题。是设计就是这样还是起塔问题？</P> Thu, 17 Feb 2022 03:15:26 GMT https://community.cloudera.com/t5/Support-Questions/hive%E5%A4%96%E9%83%A8%E8%A1%A8%E7%9B%AE%E5%BD%95%E6%9D%83%E9%99%90%E9%97%AE%E9%A2%98/m-p/336483#M232262 gfsupp 2022-02-17T03:15:26Z https://community.cloudera.com/t5/Support-Questions/hive%E5%A4%96%E9%83%A8%E8%A1%A8%E7%9B%AE%E5%BD%95%E6%9D%83%E9%99%90%E9%97%AE%E9%A2%98/m-p/336496#M232270 <P>English Translation:&nbsp;</P> <P>&nbsp;</P> <P>Title: hive external table directory permission problem</P> <P><BR />The default permission of the external warehouse directory of hive in the CDP cluster is 1777, while the internal warehouse directory is 0770. This will cause a problem that any user in the external warehouse directory of hive can write data. Is it just the design or is it a tower issue?</P> Thu, 17 Feb 2022 09:12:58 GMT https://community.cloudera.com/t5/Support-Questions/hive%E5%A4%96%E9%83%A8%E8%A1%A8%E7%9B%AE%E5%BD%95%E6%9D%83%E9%99%90%E9%97%AE%E9%A2%98/m-p/336496#M232270 VidyaSargur 2022-02-17T09:12:58Z https://community.cloudera.com/t5/Support-Questions/hive%E5%A4%96%E9%83%A8%E8%A1%A8%E7%9B%AE%E5%BD%95%E6%9D%83%E9%99%90%E9%97%AE%E9%A2%98/m-p/336500#M232274 <P>This is the default when you deploy a new insecure cluster.</P><P>When you <A href="https://docs.cloudera.com/cdp-private-cloud-base/latest/securing-hive/topics/hive_hive_authorization_models.html" target="_self">implement security</A> you need to review these defaults and tighten security, including employing Ranger to protect, among other things, the HDFS data in external directories.</P><P>&nbsp;</P><P>Cheers,</P><P>André</P> Thu, 17 Feb 2022 09:34:05 GMT https://community.cloudera.com/t5/Support-Questions/hive%E5%A4%96%E9%83%A8%E8%A1%A8%E7%9B%AE%E5%BD%95%E6%9D%83%E9%99%90%E9%97%AE%E9%A2%98/m-p/336500#M232274 araujo 2022-02-17T09:34:05Z https://community.cloudera.com/t5/Support-Questions/hive%E5%A4%96%E9%83%A8%E8%A1%A8%E7%9B%AE%E5%BD%95%E6%9D%83%E9%99%90%E9%97%AE%E9%A2%98/m-p/336685#M232347 <P><a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/72887">@gfsupp</a>,&nbsp;Has the reply helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future.&nbsp;</P> Mon, 21 Feb 2022 05:19:07 GMT https://community.cloudera.com/t5/Support-Questions/hive%E5%A4%96%E9%83%A8%E8%A1%A8%E7%9B%AE%E5%BD%95%E6%9D%83%E9%99%90%E9%97%AE%E9%A2%98/m-p/336685#M232347 VidyaSargur 2022-02-21T05:19:07Z