Community Articles

Find and share helpful community-sourced technical articles.
Announcements
Celebrating as our community reaches 100,000 members! Thank you!
Labels (2)
avatar
Expert Contributor

Complementary article to Hive CLI security to clarify the risk of using Hive CLI.
Hive CLI ( or Hive shell ) is not recommended and Apache asked users to move to Beeline even if it's still supported by Hortonworks ( HDP2.6 )

Ranger Hive plugin does not enforce permissions for Hive CLI users however it doesn’t bypass systematically “All” Ranger policies, it bypass only hive policies.

This risk is therefore for all hive managed tables. ( ones under /apps/hive/warehouse/ )

All external DB/Tables will still be protected by HDFS policies.

1,320 Views
0 Kudos