Re: Metastore thrift api permission

2018-05-29 Thread 侯宗田
Thank you for your reply. So, if this parameter, hive.metastore.pre.event.listeners is not set, there will be no authorization, every components can access the metadata. And, if this parameter, hive.security.metastore.authorization.auth.reads is set to false, everyone can read the metadata, am I

Re: Metastore thrift api permission

2018-05-29 Thread Thejas Nair
This covers metastore api authorization - https://cwiki.apache.org/confluence/display/Hive/Storage+Based+Authorization+in+the+Metastore+Server On Tue, May 29, 2018 at 8:29 AM, 侯宗田 wrote: > Hello,everyone: > I am using HMS thrift api to get metadata of hive table, it is ok in my local > host. Bu

Metastore thrift api permission

2018-05-29 Thread 侯宗田
Hello,everyone: I am using HMS thrift api to get metadata of hive table, it is ok in my local host. But I am wondering how is the metastore access permission is being controlled. Is it the metadata can be accessed by thrift client just by the HMS server IP and port or it need extra authenticatio