How to secure hive tables using ranger?

[#1 · Accepted solution]

Hive tables should be secured with the following steps:

1. Disable "doAs" for Hive. This will make everything run as the hive user on the backend. This is important because then you can control access to the HDFS files to just the hive user and this will allow you to more effectively use column level security.
2. Create a Ranger HDFS policy to give the hive user access to the HDFS files that underly the hive table.
3. Create a Ranger Hive policy to grant users accesses to the tables/columns.

This allows the most granular security control of the Hive tables.

[#2]

Use this tutorial

http://hortonworks.com/hadoop-tutorial/manage-security-policy-hive-hbase-knox-ranger/