https://community.cloudera.com/t5/Archives-of-Support-Questions/Hive-Impersonations/m-p/126328#M22836 <P><A rel="user" href="https://community.cloudera.com/users/1486/smanjee.html" nodeid="1486">@Sunile Manjee</A> To start with <A href="https://community.hortonworks.com/questions/2408/ranger-implementation-hive-impersonation-false.html" target="_blank">https://community.hortonworks.com/questions/2408/ranger-implementation-hive-impersonation-false.html</A></P> Tue, 15 Mar 2016 00:49:40 GMT nsabharwal 2016-03-15T00:49:40Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Hive-Impersonations/m-p/126327#M22835 <P>What are the risk of setting hive.server2.enable.doAs = true ? I have read <A href="http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_performance_tuning/bk_performance_tuning-20150930.pdf">this</A> but I don't under the full implications of setting to false from a security perspective. Setting to false seems hive user must have access to all files and folders. This is not doable for many use cases (from security perspective). </P> Mon, 14 Mar 2016 23:03:43 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Hive-Impersonations/m-p/126327#M22835 sunile_manjee 2016-03-14T23:03:43Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Hive-Impersonations/m-p/126328#M22836 <P><A rel="user" href="https://community.cloudera.com/users/1486/smanjee.html" nodeid="1486">@Sunile Manjee</A> To start with <A href="https://community.hortonworks.com/questions/2408/ranger-implementation-hive-impersonation-false.html" target="_blank">https://community.hortonworks.com/questions/2408/ranger-implementation-hive-impersonation-false.html</A></P> Tue, 15 Mar 2016 00:49:40 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Hive-Impersonations/m-p/126328#M22836 nsabharwal 2016-03-15T00:49:40Z