Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: update and edit hive.security.authorization.sqlstd.confwhitelist (HIVE-8534)

...

  • Default Value: (empty, but includes list shown below implicitly)
  • Added In: Hive 0.13.0 with HIVE-6846; updated in Hive 0.14.0 with HIVE-8534

A comma separated list of configuration properties that users are authorized to set when SQL standard base authorization is used.

If this parameter is not set, the default list is added by the SQL standard authorizer. The default list has these properties in Hive 0.13 (see HIVE-6846 for the same list arranged one property per line):

hive.exec.reducers.bytes.per.reducer, hive.exec.reducers.max, hive.map.aggr, hive.map.aggr.hash.percentmemory, hive.map.aggr.hash.force.flush.memory.threshold, hive.map.aggr.hash.min.reduction, hive.groupby.skewindata, hive.optimize.multigroupby.common.distincts, hive.optimize.index.groupby, hive.optimize.ppd, hive.optimize.ppd.storage, hive.optimize.ppd.storage, hive.ppd.recognizetransivity, hive.optimize.groupby, hive.optimize.sort.dynamic.partition, hive.optimize.skewjoin.compiletime, hive.optimize.union.remove, hive.multigroupby.singlereducer, hive.map.groupby.sorted, hive.map.groupby.sorted.testmode, hive.optimize.skewjoin, hive.optimize.skewjoin.compiletime, hive.mapred.mode, hive.enforce.bucketmapjoin, hive.exec.compress.output, hive.exec.compress.intermediate, hive.exec.parallel, hive.exec.parallel.thread.number, hive.exec.parallel.thread.number, hive.exec.rowoffset, hive.merge.mapfiles, hive.merge.mapredfiles, hive.merge.tezfiles, hive.ignore.mapjoin.hint, hive.auto.convert.join, hive.auto.convert.join.noconditionaltask, hive.auto.convert.join.noconditionaltask.size, hive.auto.convert.join.use.nonstaged, hive.auto.convert.join.noconditionaltask, hive.auto.convert.join.noconditionaltask.size, hive.auto.convert.join.use.nonstaged, hive.enforce.bucketing, hive.enforce.sorting, hive.enforce.sortmergebucketmapjoin, hive.auto.convert.sortmerge.join, hive.execution.engine, hive.vectorized.execution.enabled, hive.mapjoin.optimized.keys, hive.mapjoin.lazy.hashtable, hive.exec.check.crossproducts, hive.compat, hive.exec.dynamic.partition.mode, mapred.reduce.tasks, mapred.output.compression.codec, mapred.map.output.compression.codec, mapreduce.job.reduce.slowstart.completedmaps, mapreduce.job.queuename.

Hive 0.14.0 adds more parameters to the default list (see HIVE-8534). Use the 'set hive.security.authorization.sqlstd.confwhitelist' command to get the default value.

Note that the hive.conf.restricted.list checks are still enforced after the white list check.

hive.server2.builtin.udf.whitelist

...