Member since
10-28-2016
7
Posts
2
Kudos Received
0
Solutions
11-15-2016
06:33 PM
2 Kudos
I have loaded a dataset into Hive and created policies in Ranger on top. I am demonstrating this to an audience. So I wish to change the policy and then use the Hive View in Ambari and Tableau to show how the different policies enable and restrict access. Right now it seems like I have to wait couple minutes for the policies to take effect. How do I force refresh? Change the refresh time? Or even know what it is so I can wait the apporpridate duration.
... View more
Labels:
- Labels:
-
Apache Hive
-
Apache Ranger
11-03-2016
06:02 PM
@slachtermanThank you! At bit embarrassed I wasn't able to figure that out. Where is the RangerTimeofDayMatcher evaluator set? Is it a field in the hiveService.json that needs to be set just like the Location Service? Is so where/how is it set?
... View more
11-01-2016
05:14 PM
@slachtermanThank you for this fantastic tutorial. I'm trying to restrict access based on location and time of day. Forgive my ignorance but what is the syntax once I get to this last step for "Accessed from outside of location?:" to actually define the policy? And what part of the hiveService2.json would I have to change to get time of day policy capabilities? Thank you!
... View more
10-28-2016
08:05 PM
@Michael Young Thank you so much! This is very helpful!
... View more
10-28-2016
06:41 PM
@Micheal Young Thank you for your response. It is really helpful to help understand that the user has to know which column of table he/she has access to while querying. Do you know if its in the pipeline to automatically return the data the user has access to? Additionally, how can this be managed in Tableau? If a user only has access to 2 out of 3 columns in a table, is there a way to pull just those 2 columns into Tableau? Or is it all or nothing? Thanks! Kate
... View more
10-28-2016
05:59 PM
I am implementing column level security in Hive using Ranger.
I followed the tutorial listed on the hortonworks website listed here: http://hortonworks.com/hadoop-tutorial/tag-based-policies-atlas-ranger/.
I created a table employee with columns name, ssn and location. I then spun up Tableau and connected it to the Hive database using
the Tableau provided ODBC driver. I gave the username raj_ops access to the employee table and
was able to access it in Tableau as expected. Then I created a policy to restrict raj_ops
access to the location field of the employee table. I then tried accessing the data through Tableau and received the following error message while connecting, “[Hortonworks][Hardy]
(80) Syntax or semantic analysis error thrown in server while executing query.
Error message from server: Error while compiling statement: FAILED:
HiveAccessControlException Permission denied: user [raj_ops] does not have
[SELECT] privilege on [default/employee/location,name,ssn] “ My questions is there a way to pull the columns raj_ops still has
access to – name and ssn? Or is it all or nothing in the -- the entire employee table or no columns at all? Thank you! Kate
... View more
Labels:
- Labels:
-
Apache Hive
-
Apache Ranger