Support Questions

Find answers, ask questions, and share your expertise

Controlling Read access through hue user

avatar

Hi Team,

 

Wanted to check if we can control read/write access of hive tables using HUE user we are logging in?

 

Thanks,

Janani

1 REPLY 1

avatar
Master Guru

@JananiViswa1  Hue is a gateway to CDH cluster services (see Hue Applications) and both have completely separate permissions. Being a Hue superuser means nothing to HDFS, Hive, and so on.


Important:
 Hue and the underlying cluster services have completely separate permissions!

Users who log on to the Hue UI must have permission to use Hue, and also, each CDH service accessible within Hue.

 

Once Hue is authenticated by a service (for example, Hive), Hue impersonates the user (doAs) requesting use of that service (for example, to create a table). The service uses Sentry (essentially a chmod tool) to ensure the group to which that user belongs is authorized for that action.

Hue user permissions are at the application level only. For example, a Hue superuser can filter Hue user access to a CDH service but cannot authorize the use of its features. Again, Sentry does that. Learn how to Authorize Hue User Groups with Sentry.

 

Ref Doc: https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/hue_adm_permissions.html


Cheers!
Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.