hue beexwax privilege(hive security)

[#1]

Is there a way to forbidden the user drop hive table,

If do not want the user have DDL privilege ,how to do that?

[#2 · Accepted solution]

The recommended way to do this is to use Sentry:

http://sentry.incubator.apache.org/
http://www.cloudera.com/content/cloudera-content/cloudera-docs/CDH5/latest/CDH5-Installation-Guide/c...

Romain

[#3]

I do it with cm.

http://www.cloudera.com/content/cloudera-content/cloudera-docs/CM5/latest/Configuring-Hadoop-Securit...

[#4]

The correct (but more complicated way) would be to use Sentry:
http://www.cloudera.com/content/cloudera-content/cloudera-docs/CDH4/4.5.0/CDH4-Security-Guide/cdh4sg...

The other alternative is to remove the metastore DDL permissions in the
groups of your users: https://www.dropbox.com/s/nbv0wwpybwlsm67/hue-ddl.png,
but this will not secure the SQL like DROP table

Romain

[#5]

Thank you very much.

It works with sentry.