Action | Select | Update | Create | Drop | Alter | Index | Lock | All | URI RWX permission | Comments |
CREATE TABLE |
X |
X | X -for create external table – the location) |
DROP TABLE |
X |
X |
DESCRIBE TABLE | X |
X |
SHOW PARTITIONS | X |
X |
ALTER TABLE LOCATION |
X |
X | X - for new location |
ALTER PARTITION LOCATION |
X |
X | X - for new partition location |
ALTER TABLE ADD PARTITION |
X |
X | X - for partition location |
ALTER TABLE DROP PARTITION |
X |
X |
ALTER TABLE (all of them except the ones above) |
X |
X |
TRUNCATE TABLE |
X |
X |
CREATE VIEW |
X |
X |
ALTER VIEW PROPERTIES |
X |
X |
ALTER VIEW RENAME |
X |
X |
DROP VIEW PROPERTIES |
X |
X |
DROP VIEW |
X |
X |
ANALYZE TABLE | X |
X |
SHOW DATABASES | X |
X |
SHOW COLUMNS | X |
X |
SHOW TABLE STATUS | X |
X |
SHOW TABLE PROPERTIES | X |
X |
CREATE TABLE AS SELECT | X |
X |
X |
CREATE INDEX |
X |
X |
X |
DROP INDEX |
X |
X |
X |
ALTER INDEX REBUILD |
X | X |
X |
ALTER INDEX PROPERTIES |
X | X |
X |
LOCK DB |
X | X |
UNLOCK DB |
X | X |
LOCK TABLE |
X | X |
UNLOCK TABLE |
X | X |
SELECT | X |
X |
INSERT |
X |
X |
UPDATE |
X |
X |
DELETE |
X |
X |
LOAD | X |
X | X- input location |
SHOW CREATE TABLE | X |
X |
CREATE FUNCTION |
X |
X |
DROP FUNCTION |
X |
X |
MSCK (metastore check) |
X |
ALTER DATABASE |
X |
X |
CREATE DATABASE |
X |
X |
DROP DATABASE |
X |
X |
IMPORT | X |
X |
X |
EXPORT | X | X |
X |
GRANT |
In Ranger - User should be "ADMIN" |
REVOKE |
In Ranger - User should be "ADMIN" |
SHOW GRANT |
Not Supported |
CREATE ROLE |
Not Supported |
DROP ROLE |
Not Supported |
SHOW CURRENT ROLES |
Not Supported |
REVOKE ROLE |
Not Supported |
GRANT ROLE |
Not Supported |
SHOW ROLE |
Not Supported |
SHOW ROLE GRANT |
Not Supported |
SHOW PRINCIPALS |
Not Supported |
SHOW CONF |
No Ranger Auth |
LIST FILE[S] , LIST JAR[S], LIST ARCHIVE[S] |
No Ranger Auth |
ADD FILE[S] , ADD JAR[S], ADD ARCHIVE[S] |
No Ranger Auth |
DELETE FILE[S] , DELETE JAR[S] , DELETE ARCHIVE[S] |
No Ranger Auth |
COMPILE |
No Ranger Auth |
DFS |
Not Supported in Ranger |
RESET |
No Ranger Auth |
SET |
No Ranger Auth |
SHOW FUNCTION |
No Ranger Auth |
DESCRIBE FUNCTION |
No Ranger Auth |
DROP MACRO |
No Ranger Auth |
CREATE MACRO |
No Ranger Auth |
SHOW LOCKS |
No Ranger Auth |
SHOW TRANSACTIONS |
No Ranger Auth |
EXPLAIN |
No Ranger Auth |
...