| set hive.test.authz.sstd.hs2.mode=true; |
| set hive.security.authorization.manager=org.apache.hadoop.hive.ql.security.authorization.plugin.sqlstd.SQLStdHiveAuthorizerFactoryForTest; |
| set hive.security.authenticator.manager=org.apache.hadoop.hive.ql.security.SessionStateConfigUserAuthenticator; |
| set user.name=hive_admin_user; |
| |
| create table src_autho_test (key STRING, value STRING) ; |
| |
| set hive.security.authorization.enabled=true; |
| set role ADMIN; |
| --table grant to user |
| |
| grant select on table src_autho_test to user user_sauth; |
| |
| show grant user user_sauth on table src_autho_test; |
| |
| |
| revoke select on table src_autho_test from user user_sauth; |
| show grant user user_sauth on table src_autho_test; |
| |
| --role |
| create role src_role; |
| grant role src_role to user user_sauth; |
| show role grant user user_sauth; |
| |
| --table grant to role |
| |
| -- also verify case insesitive behavior of role name |
| grant select on table src_autho_test to role Src_ROle; |
| |
| show grant role src_role on table src_autho_test; |
| revoke select on table src_autho_test from role src_rolE; |
| |
| -- drop role |
| drop role SRc_role; |
| |
| set hive.security.authorization.enabled=false; |
| drop table src_autho_test; |