0

I am new to Hadoop/Hive. I have a question related to VIEWS in Hive.

I have a requirement in Hive where I need to give access to specific rows of a table to some users and specific columns of a table to some users. I know we can create VIEWS in Hive. But is it possible to provide access using GRANT statement only to VIEWS to users without giving access to the base tables?

If this is not possible, is there any other method to provide only column or row level access in Hive?

Please let me know. Thanks for the assistance.

user2732748
  • 97
  • 4
  • 12
  • AFAIK, a VIEW with desired access rights cannot be created without granting access to the underlying base table. You need to take it with a pinch of salt. – Tariq Aug 30 '13 at 20:40

2 Answers2

0

First it's important to understand what Hive really is. Hive is just a compiler (more or less) of SQL statements into MapReduce tasks, it does control data storage layer. So there is no such concept as access management in Hive.

Also it's necessary to understand that "table" in Hive is just an HDFS folder with files. It means that you can manage access on per-table basis with standard set of HDFS access management tools.

The best you can do is to limit access on HDFS level to database and export parts of your data into "public tables" for less privileged users to read.

Andrey Tatarinov
  • 530
  • 1
  • 3
  • 11
  • Hive is an owner of metadata as well, there are certainly permissions to access the objects (which are metadata) and you do have to grant to roles or users. – thagraybush Feb 25 '21 at 07:24
0

Yes, you can definitely grant access to the View and restrict the backing Table. Take a peek at https://github.com/HortonworksUniversity/Essentials/blob/master/demos/ranger/README.md for some demo notes as well as a video recording of myself doing that very thing using Ranger.

Lester Martin
  • 311
  • 1
  • 5