Hive之權限控制

Hive之權限

一、庫級的權限

-- 授予所有權限給某個用戶
grant all on msta to user {userName};
-- 授權admin privilege權限
grant ADMIN PRIVILEGE on database {dbName} to user {userName};

-- 授予某個庫的權限給某個用戶
grant select on database {dbName} to user {userName};
grant insert on database {dbName} to user {userName};
grant update on database {dbName} to user {userName};
grant delete on database {dbName} to user {userName};

-- 回收某個庫的權限給某個用戶
revoke select on database {dbName} from user {userName};
revoke insert on database {dbName} from user {userName};
revoke update on database {dbName} from user {userName};
revoke delete on database {dbName} from user {userName};

-- 查看指定用戶在所有庫下面的權限
show grant user {userName};
-- 查看指定用戶在某個庫的權限
show grant user {userName} on database {dbName};

 

二、表級的權限

-- 授予表的權限給某個用戶
grant create on database {dbName} to user {userName};
grant select on table {dbName}.tableName to user {userName};
grant insert on table {dbName}.tableName to user {userName};
grant update on table {dbName}.tableName to user {userName};
grant delete on table {dbName}.tableName to user {userName};


-- 回收某個用戶的表的權限
revoke create on table {dbName}.tableName from user {userName}; 
revoke select on table {dbName}.tableName from user {userName};
revoke insert on table {dbName}.tableName from user {userName};
revoke update on table {dbName}.tableName from user {userName}; 
revoke delete on table {dbName}.tableName from user {userName};

-- 查看指定用戶在指定表的權限
show grant user {userName} on table {dbName}.{tableName};

 

 

 

 

 

-- 設置session具有Admin權限
set role admin;

ALTER  更改表結構，創建分區
CREATE  創建表
DROP  刪除表，或分區
INDEX  創建和刪除索引
LOCK  鎖定表，保證並發
SELECT  查詢表權限
SHOW_DATABASE  查看數據庫權限
UPDATE  為表加載本地數據的權限