Hi,

I have just started learning about hive.
I have configured Hive to use mysql as the metastore instead of derby.
If I wish to use GRANT and REVOKE commands, i can use it with any user. A
user can issue GRANT or REVOKE commands to any other users' table since
both the users' tables are present in the same warehouse.

Isn't there a concept of superuser/admin in hive who alone has the
authority to issue these commands ?

Any answer is greatly appreciated!

--
Thanks and Regards,
                Sachin Sudarshana

You might want to read this

https://cwiki.apache.org/Hive/languagemanual-auth.html

On Fri, Feb 22, 2013 at 9:44 PM, Sachin Sudarshana <
[EMAIL PROTECTED]> wrote:

> Hi,
>
> I have just started learning about hive.
> I have configured Hive to use mysql as the metastore instead of derby.
> If I wish to use GRANT and REVOKE commands, i can use it with any user. A
> user can issue GRANT or REVOKE commands to any other users' table since
> both the users' tables are present in the same warehouse.
>
> Isn't there a concept of superuser/admin in hive who alone has the
> authority to issue these commands ?
>
> Any answer is greatly appreciated!
>
> --
> Thanks and Regards,
>                 Sachin Sudarshana
>

Hi,
I have read about roles, user privileges, group privileges etc.
But these roles can be created by any user for any database/table. I would
like to know if there is a specific 'administrator' for hive who can log on
with his credentials and is the only one entitled to create roles, grant
privileges etc.

Thank you.

On Fri, Feb 22, 2013 at 4:19 PM, Jagat Singh <[EMAIL PROTECTED]> wrote:

> You might want to read this
>
> https://cwiki.apache.org/Hive/languagemanual-auth.html
>
>
>
>
> On Fri, Feb 22, 2013 at 9:44 PM, Sachin Sudarshana <
> [EMAIL PROTECTED]> wrote:
>
>> Hi,
>>
>> I have just started learning about hive.
>> I have configured Hive to use mysql as the metastore instead of derby.
>> If I wish to use GRANT and REVOKE commands, i can use it with any user. A
>> user can issue GRANT or REVOKE commands to any other users' table since
>> both the users' tables are present in the same warehouse.
>>
>> Isn't there a concept of superuser/admin in hive who alone has the
>> authority to issue these commands ?
>>
>> Any answer is greatly appreciated!
>>
>> --
>> Thanks and Regards,
>>                 Sachin Sudarshana
>>
>
>
--
Thanks and Regards,
                Sachin Sudarshana

Hi Sachin

Currently there is no such admin user concept in hive.

Regards
Bejoy KS

Sent from remote device, Please excuse typos

-----Original Message-----
From: Sachin Sudarshana <[EMAIL PROTECTED]>
Date: Fri, 22 Feb 2013 16:40:49
To: <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Subject: Re: Security for Hive

Hi,
I have read about roles, user privileges, group privileges etc.
But these roles can be created by any user for any database/table. I would
like to know if there is a specific 'administrator' for hive who can log on
with his credentials and is the only one entitled to create roles, grant
privileges etc.

Thank you.

On Fri, Feb 22, 2013 at 4:19 PM, Jagat Singh <[EMAIL PROTECTED]> wrote:

> You might want to read this
>
> https://cwiki.apache.org/Hive/languagemanual-auth.html
>
>
>
>
> On Fri, Feb 22, 2013 at 9:44 PM, Sachin Sudarshana <
> [EMAIL PROTECTED]> wrote:
>
>> Hi,
>>
>> I have just started learning about hive.
>> I have configured Hive to use mysql as the metastore instead of derby.
>> If I wish to use GRANT and REVOKE commands, i can use it with any user. A
>> user can issue GRANT or REVOKE commands to any other users' table since
>> both the users' tables are present in the same warehouse.
>>
>> Isn't there a concept of superuser/admin in hive who alone has the
>> authority to issue these commands ?
>>
>> Any answer is greatly appreciated!
>>
>> --
>> Thanks and Regards,
>>                 Sachin Sudarshana
>>
>
>
--
Thanks and Regards,
                Sachin Sudarshana

 So that means any user can revoke or give permissions to any user for any
table in the metastore?

Sent from my Phone, please ignore typos
 ------------------------------
From: [EMAIL PROTECTED]
Sent: 22-02-2013 11:30 PM
To: [EMAIL PROTECTED]
Subject: Re: Security for Hive

Hi Sachin

Currently there is no such admin user concept in hive.
Regards
Bejoy KS

Sent from remote device, Please excuse typos
------------------------------
*From: * Sachin Sudarshana <[EMAIL PROTECTED]>
*Date: *Fri, 22 Feb 2013 16:40:49 +0530
*To: *<[EMAIL PROTECTED]>
*ReplyTo: * [EMAIL PROTECTED]
*Subject: *Re: Security for Hive

Hi,
I have read about roles, user privileges, group privileges etc.
But these roles can be created by any user for any database/table. I would
like to know if there is a specific 'administrator' for hive who can log on
with his credentials and is the only one entitled to create roles, grant
privileges etc.

Thank you.

On Fri, Feb 22, 2013 at 4:19 PM, Jagat Singh <[EMAIL PROTECTED]> wrote:

> You might want to read this
>
> https://cwiki.apache.org/Hive/languagemanual-auth.html
>
>
>
>
> On Fri, Feb 22, 2013 at 9:44 PM, Sachin Sudarshana <
> [EMAIL PROTECTED]> wrote:
>
>> Hi,
>>
>> I have just started learning about hive.
>> I have configured Hive to use mysql as the metastore instead of derby.
>> If I wish to use GRANT and REVOKE commands, i can use it with any user. A
>> user can issue GRANT or REVOKE commands to any other users' table since
>> both the users' tables are present in the same warehouse.
>>
>> Isn't there a concept of superuser/admin in hive who alone has the
>> authority to issue these commands ?
>>
>> Any answer is greatly appreciated!
>>
>> --
>> Thanks and Regards,
>>                 Sachin Sudarshana
>>
>
>
--
Thanks and Regards,
                Sachin Sudarshana

Hi Austin

AFAIK at the moment you can control permissions gracefully only on a data level not on the metadata level. ie you can play with the hdfs permissions .

Regards
Bejoy KS

Sent from remote device, Please excuse typos

-----Original Message-----
From: Austin Chungath <[EMAIL PROTECTED]>
Date: Fri, 22 Feb 2013 23:11:51
To: [EMAIL PROTECTED]<[EMAIL PROTECTED]>; [EMAIL PROTECTED]<[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Subject: RE: Security for Hive

  So that means any user can revoke or give permissions to any user for any
table in the metastore?

Sent from my Phone, please ignore typos
 ------------------------------
From: [EMAIL PROTECTED]
Sent: 22-02-2013 11:30 PM
To: [EMAIL PROTECTED]
Subject: Re: Security for Hive

Hi Sachin

Currently there is no such admin user concept in hive.
Regards
Bejoy KS

Sent from remote device, Please excuse typos
------------------------------
*From: * Sachin Sudarshana <[EMAIL PROTECTED]>
*Date: *Fri, 22 Feb 2013 16:40:49 +0530
*To: *<[EMAIL PROTECTED]>
*ReplyTo: * [EMAIL PROTECTED]
*Subject: *Re: Security for Hive

Hi,
I have read about roles, user privileges, group privileges etc.
But these roles can be created by any user for any database/table. I would
like to know if there is a specific 'administrator' for hive who can log on
with his credentials and is the only one entitled to create roles, grant
privileges etc.

Thank you.

On Fri, Feb 22, 2013 at 4:19 PM, Jagat Singh <[EMAIL PROTECTED]> wrote:

> You might want to read this
>
> https://cwiki.apache.org/Hive/languagemanual-auth.html
>
>
>
>
> On Fri, Feb 22, 2013 at 9:44 PM, Sachin Sudarshana <
> [EMAIL PROTECTED]> wrote:
>
>> Hi,
>>
>> I have just started learning about hive.
>> I have configured Hive to use mysql as the metastore instead of derby.
>> If I wish to use GRANT and REVOKE commands, i can use it with any user. A
>> user can issue GRANT or REVOKE commands to any other users' table since
>> both the users' tables are present in the same warehouse.
>>
>> Isn't there a concept of superuser/admin in hive who alone has the
>> authority to issue these commands ?
>>
>> Any answer is greatly appreciated!
>>
>> --
>> Thanks and Regards,
>>                 Sachin Sudarshana
>>
>
>
--
Thanks and Regards,
                Sachin Sudarshana

 Thanks Bejoy.

Sent from my Windows Phone
 ------------------------------
From: [EMAIL PROTECTED]
Sent: 23-02-2013 08:29 PM
To: [EMAIL PROTECTED]
Subject: Re: Security for Hive

 Hi Austin

AFAIK at the moment you can control permissions gracefully only on a data
level not on the metadata level. ie you can play with the hdfs permissions .
Regards
Bejoy KS

Sent from remote device, Please excuse typos
------------------------------
*From: * Austin Chungath <[EMAIL PROTECTED]>
*Date: *Fri, 22 Feb 2013 23:11:51 -0800
*To: *[EMAIL PROTECTED]<[EMAIL PROTECTED]>; [EMAIL PROTECTED]<
[EMAIL PROTECTED]>
*ReplyTo: * [EMAIL PROTECTED]
*Subject: *RE: Security for Hive

 So that means any user can revoke or give permissions to any user for any
table in the metastore?

Sent from my Phone, please ignore typos
 ------------------------------
From: [EMAIL PROTECTED]
Sent: 22-02-2013 11:30 PM
To: [EMAIL PROTECTED]
Subject: Re: Security for Hive

Hi Sachin

Currently there is no such admin user concept in hive.
Regards
Bejoy KS

Sent from remote device, Please excuse typos
------------------------------
*From: * Sachin Sudarshana <[EMAIL PROTECTED]>
*Date: *Fri, 22 Feb 2013 16:40:49 +0530
*To: *<[EMAIL PROTECTED]>
*ReplyTo: * [EMAIL PROTECTED]
*Subject: *Re: Security for Hive

Hi,
I have read about roles, user privileges, group privileges etc.
But these roles can be created by any user for any database/table. I would
like to know if there is a specific 'administrator' for hive who can log on
with his credentials and is the only one entitled to create roles, grant
privileges etc.

Thank you.

On Fri, Feb 22, 2013 at 4:19 PM, Jagat Singh <[EMAIL PROTECTED]> wrote:

> You might want to read this
>
> https://cwiki.apache.org/Hive/languagemanual-auth.html
>
>
>
>
> On Fri, Feb 22, 2013 at 9:44 PM, Sachin Sudarshana <
> [EMAIL PROTECTED]> wrote:
>
>> Hi,
>>
>> I have just started learning about hive.
>> I have configured Hive to use mysql as the metastore instead of derby.
>> If I wish to use GRANT and REVOKE commands, i can use it with any user. A
>> user can issue GRANT or REVOKE commands to any other users' table since
>> both the users' tables are present in the same warehouse.
>>
>> Isn't there a concept of superuser/admin in hive who alone has the
>> authority to issue these commands ?
>>
>> Any answer is greatly appreciated!
>>
>> --
>> Thanks and Regards,
>>                 Sachin Sudarshana
>>
>
>
--
Thanks and Regards,
                Sachin Sudarshana

Correct, you'll need to manage the permissions manually in HDFS. The
authorization model in Hive is just to prevent accidents. Hopefully, we'll
address this eventually, but in the mean time it is strongly encouraged to
set the permissions of your databases and tables in hdfs to the desired
permissions.

-- Owen