question Where are deny conditions in hive policies? in Archives of Support Questions (Read Only)

Where are deny conditions in hive policies?

rabberbo — Thu, 27 Oct 2016 03:38:13 GMT

This link (https://cwiki.apache.org/confluence/display/RANGER/Deny-conditions+and+excludes+in+Ranger+policies) has screenshots of hive policies with deny conditions. I have deny conditions enabled, but still it does not show up for the role based hive policies. Any idea why not?

Re: Where are deny conditions in hive policies?

svenkat — Thu, 27 Oct 2016 03:43:20 GMT

Please see https://community.hortonworks.com/articles/61208/how-to-enable-deny-conditions-and-excludes-in-rang.html for detailed How-To.

Re: Where are deny conditions in hive policies?

jservin — Fri, 28 Oct 2016 01:16:37 GMT

By default a user is denied access to a hive table/column. A user must be given some access (SELECT, UPDATE, etc.) for a given schema/table/column, otherwise access is denied.