Hue Sentry access

Vaidyanathan Radhakrishnan

unread,

Jun 14, 2016, 11:31:19 PM6/14/16

to Romain Rigaux, 'Julian' via Hue-Users

Hi Romain / Team,

Current environment: CDH 5.5.1 and Hue 3.9

- LDAP integrated with Hue and AD user can login successfully.
- Kerberos not implemented.
- Created the same user in hdfs under hdfs group
- Created role. Granted hive database under testdb and uri access (/user/hive/warehouse/testdb) to role

Question: If user login he can access all the databases in hue (/user/hue/warehouse).

Kindly suggest how to restrict access to specific database instead of all databases and tables.

Note: created user in UNIX hdfs else I receive no valid privileges for switch database error.

Sent from my iPhone

Romain Rigaux

unread,

Jun 15, 2016, 12:49:16 AM6/15/16

to Vaidyanathan Radhakrishnan, 'Julian' via Hue-Users

Do you mean a 'DENY' action rather than granting permissions?

It is not available in Sentry yet: https://issues.apache.org/jira/browse/SENTRY-1067

Vaidyanathan Radhakrishnan

unread,

Jun 15, 2016, 4:12:21 AM6/15/16

to Romain Rigaux, 'Julian' via Hue-Users

Hi Romain,

Grant access should only to one database in Hue. Since all databases resides in /user/hive/warehouse , all users can access all databases in hue.