- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Controlling Read access through hue user
- Labels:
-
Apache Hadoop
-
Apache Hive
-
Cloudera Hue
Created on
‎04-30-2021
10:45 AM
- last edited on
‎04-30-2021
12:25 PM
by
cjervis
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Team,
Wanted to check if we can control read/write access of hive tables using HUE user we are logging in?
Thanks,
Janani
Created ‎04-30-2021 10:03 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@JananiViswa1 Hue is a gateway to CDH cluster services (see Hue Applications) and both have completely separate permissions. Being a Hue superuser means nothing to HDFS, Hive, and so on.
Important: Hue and the underlying cluster services have completely separate permissions!
Users who log on to the Hue UI must have permission to use Hue, and also, each CDH service accessible within Hue.
Once Hue is authenticated by a service (for example, Hive), Hue impersonates the user (doAs) requesting use of that service (for example, to create a table). The service uses Sentry (essentially a chmod tool) to ensure the group to which that user belongs is authorized for that action.
Hue user permissions are at the application level only. For example, a Hue superuser can filter Hue user access to a CDH service but cannot authorize the use of its features. Again, Sentry does that. Learn how to Authorize Hue User Groups with Sentry.
Ref Doc: https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/hue_adm_permissions.html
Cheers!
Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.
