...
hive.metastore.pre.event.listeners
Set to
org.apache.hadoop.hive.ql.security.authorization.AuthorizationPreEventListener
.This turns on metastore-side security.
hive.security.metastore.authorization.manager
Set to org.apache.hadoop.hive.ql.security.authorization.DefaultHiveMetastoreAuthorizationProviderStorageBasedAuthorizationProvider .
This tells Hive which metastore-side authorization provider to use. The default setting uses
DefaultHiveMetastoreAuthorizationProvider
, which implements the standard Hive grant/revoke model. To use an HDFS permission-based model (recommended) to do your authorization, you can useorg.apache.hadoop.hive.ql.security.authorization.StorageBasedAuthorizationProvider
insteadStorageBasedAuthorizationProvider as instructed above.Info title Versions 0.10.0 and 0.12.0 The
StorageBasedAuthorizationProvider
was introduced in Hive 0.10.0, running on the metastore side only (HIVE-3705). Starting in Hive 0.12.0 it also runs on the client side (HIVE-5048 and HIVE-5402).
...