Well, the hive-env.sh is just a shell script, so you could do some bash magic to see if user is in group. Something like the following (I am sure someone could do it more simply!). Note that this assumes that your groups are synced with linux using sssd, centrify, etc. NOTE: While not officially deprecated, using the hive cli command is discouraged in favor of beeline. Hive CLI doesn't take advantage of Ranger security. In HDP 3.x it is being rewritten as a wrapper around Hiveserver2. G=`groups $USER`
IFS=', ' read -r -a mygroups <<< "$G"
found=0
searchGroup="admin"
if (printf '%s\n' "${mygroups[@]}" | grep -xq $searchGroup); then
found=1
# Logic to allow Hive here.
fi
echo $found
... View more
