...
3.1.1 Hive CLI, HiveAuthorizer specified in hive-site.xml
| Metastore Security | SELECT | DDL/DML | GRANT/REVOKE |
|---|---|---|---|
| None(hive.metastore.pre.event.listeners not set) | x | x | Authorizer |
| Storage-Based | Listener | Listener | Listener+Authorizer |
| Default | Listener* | Listener* | Listener* |
3.1.2 Hive CLI, HiveAuthorizer specified in hiveserver2-site.xml
| Metastore Security | SELECT | DDL/DML | GRANT/REVOKE |
|---|---|---|---|
| None(hive.metastore.pre.event.listeners not set) | x | x | x |
| Storage-Based | Listener | Listener | Listener |
| Default | Listener* | Listener* | Listener* |
3.1.3 Hive Server2, HiveAuthorizer specified in hiveserver2-site.xml
| Metastore Security | SELECT | DDL/DML | GRANT/REVOKE |
|---|---|---|---|
| None(hive.metastore.pre.event.listeners not set) | Authorizer | Authorizer | Authorizer |
| Storage-Based | Listener+Authorizer | Listener+Authorizer | Listener+Authorizer |
| Default | Listener* | Listener* | Listener+Authorizer |
3.1.4 Hive Server2, HiveAuthorizer specified in hive-site.xml
| Metastore Security | SELECT | DDL/DML | GRANT/REVOKE |
|---|---|---|---|
| None(hive.metastore.pre.event.listeners not set) | Authorizer | Authorizer | Authorizer |
| Storage-Based | Listener+Authorizer | Listener+Authorizer | Listener+Authorizer |
| Default | Listener* | Listener* | Listener+Authorizer |
3.2 Future Extensions
It is conceivable that the same sync mechanism as described in Section 2.2.3 can be similarly applied to other Hadoop applications. In particular, the new “resourceService” field can serve as a link between an application and its underlying storage. It could be even pushed to form a “synch chain” of morn than two levels. For instance, for a Hive on HBase on HDFS.
...