Page History

...

• hive.metastore.pre.event.listeners

  Set to org.apache.hadoop.hive.ql.security.authorization.AuthorizationPreEventListener.

  This turns on metastore-side security.
   

• hive.security.metastore.authorization.manager

  Set to to org.apache.hadoop.hive.ql.security.authorization.DefaultHiveMetastoreAuthorizationProvider.

  This tells Hive which metastore-side authorization provider to use. The default setting uses DefaultHiveMetastoreAuthorizationProvider, which implements the standard Hive grant/revoke model. To use an HDFS permission-based model (recommended) to do your authorization, you can use org.apache.hadoop.hive.ql.security.authorization.StorageBasedAuthorizationProvider instead.

  Info
  title Versions 0.10.0 and 0.12.0
  The StorageBasedAuthorizationProvider was introduced in Hive 0.10.0, running on the metastore side only (HIVE-3705). Starting in Hive 0.12.0 it also runs on the client side (HIVE-5048 and HIVE-5402).

• hive.security.metastore.authenticator.manager

  Set to org.apache.hadoop.hive.ql.security.HadoopDefaultMetastoreAuthenticator.

...