Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: expanding intro - SBA and SQL auth can be used together

...

This model is similar to the SQL standards based authorization mode, in that it provides grant/revoke statement based access control. However, the access control policy is different from SQL Standards based authorization, and they are not compatible. Use of this mode is also supported for hive commandline users. However, for reasons mentioned under discussion of SQL Standards based authorization (above), it is not a secure mode of authorization for hive commandline.

 

...

Addressing different use cases for authorization

Storage based authorization provides a simple way to address all the use cases described above. However, if you also need finer grained access control for SQL users, you can also enable SQL standards based authorization mode in HiveServer2.

Ie, you can have storage based authorization  enabled for the metastore api calls (in hive metastore), and have SQL standards based authorization enabled in HiveServer2 at the same time.

Hive Default Authorization

This section describes Hive security using the basic authorization scheme, which regulates access to Hive metadata on the client side. Starting with Hive release 0.10, additional security measures can be enabled to regulate access on the metastore side, as described in Metastore Server Security below.

...