hadoop - 限制用户在Hive中的数据库中创建表

Question

在Hive中使用sql授权，如何限制用户在数据库中创建表？

在hadoop中添加任何用户之后，该用户可以在hive数据库中创建表，如下所示。因此，有一种方法可以限制用户在配置单元数据库中创建表。

useradd test001

beeline -u 'jdbc:hive2://master01.teradata.com:10000' -n test001  -p test001

create table table01 (col1 int) ;
insert into table01 values (1);
select * from table01;
1 row selected (0.309 seconds)

Answer 1

见Grant/Revoke Privileges

试试:

> revoke create on Database <db_Name> from user test001;

语法:

GRANT
    priv_type [(column_list)]
      [, priv_type [(column_list)]] ...
    [ON object_specification]
    TO principal_specification [, principal_specification] ...
    [WITH GRANT OPTION]

REVOKE [GRANT OPTION FOR]
    priv_type [(column_list)]
      [, priv_type [(column_list)]] ...
    [ON object_specification]
    FROM principal_specification [, principal_specification] ...

REVOKE ALL PRIVILEGES, GRANT OPTION
    FROM user [, user] ...

priv_type:
    ALL | ALTER | UPDATE | CREATE | DROP
  | INDEX | LOCK | SELECT | SHOW_DATABASE 

object_specification:
    TABLE tbl_name
  | DATABASE db_name

principal_specification:
    USER user
  | GROUP group
  | ROLE role