You will need to set the following in the hive-site.xml and restart the HiveServer2. hive.server2.enable.doAs = false
hive.security.authorization.manager = org.apache.hadoop.hive.ql.security.authorization.plugin.sqlstd.SQLStdHiveAuthorizerFactory
hive.security.authenticator.manager = org.apache.hadoop.hive.ql.security.SessionStateUserAuthenticator
hive.users.in.admin.role = hive
hive.security.authorization.enabled = true Note that the permissions are enforced in HS2 session only. So, if hive user created some table and did not explicitly give permissions to user mxl then mxl wouldn't be able to operate on it. Example - Login as user hive and in beeline session run the following:
create table test (key string, val int);
- Now login as user mxl and in beeline session run the following:
insert into table test select * from foo;
You will see an error like "Permission denied. name=mxl does not have following privileges. INSERT."
- To explicitly provide permissions, login as user hive in beeline session and run:
grant insert on test to user mxl; Hope this is what you were looking for, not very sure reading your question.
... View more
