| --! qt:dataset:src |
| set hive.security.authorization.manager=org.apache.hadoop.hive.ql.security.authorization.DefaultHiveAuthorizationProvider; |
| set hive.exec.reducers.max=1; |
| |
| create table src_autho_test_n8 as select * from src; |
| |
| create view v_n9 as select * from src_autho_test_n8; |
| |
| create view v1_n13 as select * from src_autho_test_n8; |
| |
| create view v2_n7 as select * from src_autho_test_n8; |
| |
| set hive.security.authorization.enabled=true; |
| |
| --table grant to user |
| |
| grant select on table src_autho_test_n8 to user hive_test_user; |
| |
| grant select on table v_n9 to user hive_test_user; |
| grant select on table v1_n13 to user hive_test_user; |
| grant select on table v2_n7 to user hive_test_user; |
| |
| show grant user hive_test_user on table v_n9; |
| show grant user hive_test_user on v_n9; |
| show grant user hive_test_user on v_n9(key); |
| |
| select * from v_n9 order by key limit 10; |
| |
| revoke select on table src_autho_test_n8 from user hive_test_user; |
| |
| show grant user hive_test_user on table v_n9; |
| show grant user hive_test_user on v_n9; |
| show grant user hive_test_user on v_n9(key); |
| |
| revoke select on table v_n9 from user hive_test_user; |
| |
| show grant user hive_test_user on table v_n9; |
| show grant user hive_test_user on v_n9; |
| show grant user hive_test_user on v_n9(key); |
| |
| --column grant to user |
| |
| grant select on table src_autho_test_n8 to user hive_test_user; |
| grant select(key) on table v_n9 to user hive_test_user; |
| |
| show grant user hive_test_user on table v_n9; |
| show grant user hive_test_user on v_n9(key); |
| |
| select key from v_n9 order by key limit 10; |
| |
| select key from |
| (select v_n9.key from src_autho_test_n8 join v_n9 on src_autho_test_n8.key=v_n9.key)subq |
| order by key limit 10; |
| |
| select key from |
| (select key as key from src_autho_test_n8 union all select key from v_n9)subq |
| limit 10; |
| |
| select key from |
| (select value as key from v2_n7 union select value as key from v1_n13 union all select key from v_n9)subq |
| limit 10; |