question Re: Hi i am new to hadoop admin, i want to remove write access to all databases and file systems in production cluster and we are using hdp 2.1.5. can any one help me how to remove write access,which directory i should modified in Archives of Support Questions (Read Only)

Hi i am new to hadoop admin, i want to remove write access to all databases and file systems in production cluster and we are using hdp 2.1.5. can any one help me how to remove write access,which directory i should modified

g_rao9704 — Mon, 06 Jun 2016 17:20:08 GMT

Re: Hi i am new to hadoop admin, i want to remove write access to all databases and file systems in production cluster and we are using hdp 2.1.5. can any one help me how to remove write access,which directory i should modified

tsaito — Mon, 06 Jun 2016 23:46:11 GMT

Hi Sankar,

Are you using HDP cluster? If so, you can take an advantage of Ranger, which allow you to grant different permission to different users. You can lean more about Ranger via http://hortonworks.com/apache/ranger/

Re: Hi i am new to hadoop admin, i want to remove write access to all databases and file systems in production cluster and we are using hdp 2.1.5. can any one help me how to remove write access,which directory i should modified

g_rao9704 — Mon, 06 Jun 2016 23:53:28 GMT

we dont have ranger..we are using HDP 2.1.5 , I think Ranger is available on 2.3 onwords. any other posibilities

Re: Hi i am new to hadoop admin, i want to remove write access to all databases and file systems in production cluster and we are using hdp 2.1.5. can any one help me how to remove write access,which directory i should modified

tsaito — Tue, 07 Jun 2016 11:38:24 GMT

You can use HDFS ACLS:

http://hortonworks.com/hadoop-tutorial/fine-grained-permissions-hdfs-files-hadoop-using-hdfs-acls/

And if you are using Hive, you can use storage based authorization as hive.security.authorization.manager in hive-site.xml, which uses HDFS ACL as permission to hive tables/databases.

Re: Hi i am new to hadoop admin, i want to remove write access to all databases and file systems in production cluster and we are using hdp 2.1.5. can any one help me how to remove write access,which directory i should modified

divakarreddy_a — Tue, 07 Jun 2016 11:55:04 GMT

@sankar rao

In simple solution you can try this as well.

hadoop fs -chmode -R 755 /apps/hive/warehouse/

Here DB owner is going to get read,write and execute, Group & others are going to get read and execute only.

you can explore Ranger and ACL functionality as well for implementing different level of access for users.

Re: Hi i am new to hadoop admin, i want to remove write access to all databases and file systems in production cluster and we are using hdp 2.1.5. can any one help me how to remove write access,which directory i should modified

g_rao9704 — Wed, 08 Jun 2016 18:22:29 GMT

when i enter hadoop fs -ls /apps output is like below

drwxr-xr-x hdfs hdfs /apps/hive this means no write access for other ?please suggest me