forked from docs/doc-exports
Yang, Tong
6182f91ba8
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: Yang, Tong <yangtong2@huawei.com> Co-committed-by: Yang, Tong <yangtong2@huawei.com>
24 lines
5.3 KiB
HTML
24 lines
5.3 KiB
HTML
<a name="mrs_01_0960"></a><a name="mrs_01_0960"></a>
|
|
|
|
<h1 class="topictitle1">Specifying Whether the <strong id="b122071918315">ADMIN</strong> Permissions Is Required for Creating Temporary Functions</h1>
|
|
<div id="body1590395283790"><div class="section" id="mrs_01_0960__sec1c6e66e7c049d6aea7dbd1c0bd12ee"><h4 class="sectiontitle">Scenario</h4><p id="mrs_01_0960__a73d36471fbf140bda4919bb1e27ad394">You must have <strong id="mrs_01_0960__b1347414251315">ADMIN</strong> permission when creating temporary functions on Hive of the open source community version.</p>
|
|
<p id="mrs_01_0960__abd0a234de22b48c1b66400a244ca32fe">MRS Hive supports the configuration of the function for creating temporary functions with <strong id="mrs_01_0960__b7833182810311">ADMIN</strong> permission. The function is disabled by default, which is the same as that of the open-source community version.</p>
|
|
<p id="mrs_01_0960__a3018e01eb5c54f7588a96ee651c5e9dd">You can modify configurations of this function. After the function is enabled, you can create temporary functions without <strong id="mrs_01_0960__b29133293116">ADMIN</strong> permission. If this parameter is set to <strong id="mrs_01_0960__b1658919336327">false</strong>, security risks exist.</p>
|
|
<div class="note" id="mrs_01_0960__n72d169975b5e48c2b9dfbe6b3280bb1a"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p class="text" id="mrs_01_0960__a82df98607abc463c8677ff20dadac075">The security mode supports the configuration of whether the ADMIN permission is required for creating temporary functions, but the common mode does not support this function.</p>
|
|
</div></div>
|
|
</div>
|
|
<div class="section" id="mrs_01_0960__sd796435b2c254ca7aaa370451e468a24"><h4 class="sectiontitle">Procedure</h4><ol id="mrs_01_0960__ol181811550174911"><li id="mrs_01_0960__li13806122116487"><span>The Hive service configuration page is displayed.</span><p><ul id="mrs_01_0960__ul1692910323486"><li id="mrs_01_0960__li792916322486">For versions earlier than MRS 1.9.2, log in to MRS Manager, choose <strong id="mrs_01_0960__b146778201943">Services</strong> > <strong id="mrs_01_0960__b2067810202416">Hive</strong> > <strong id="mrs_01_0960__b367882019419">Service Configuration</strong>, and select <strong id="mrs_01_0960__b467815201245">All</strong> from the <strong id="mrs_01_0960__b176794201843">Basic</strong> drop-down list.</li><li id="mrs_01_0960__li979413816488">For MRS 1.9.2 or later, click the cluster name on the MRS console, choose <strong id="mrs_01_0960__b9731622943">Components</strong> > <strong id="mrs_01_0960__b9731152220417">Hive</strong> > <strong id="mrs_01_0960__b167320221846">Service Configuration</strong>, and select <strong id="mrs_01_0960__b673213224411">All</strong> from the <strong id="mrs_01_0960__b173372214419">Basic</strong> drop-down list.<div class="note" id="mrs_01_0960__note73070488542"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="mrs_01_0960__p20645162034017">If the <strong id="mrs_01_0960__b10720155515812">Components</strong> tab is unavailable, complete IAM user synchronization first. (On the <strong id="mrs_01_0960__b1472013553581">Dashboard</strong> page, click <strong id="mrs_01_0960__b772115565818">Synchronize</strong> on the right side of <span class="parmname" id="mrs_01_0960__parmname1721185515817"><b>IAM User Sync</b></span> to synchronize IAM users.)</p>
|
|
</div></div>
|
|
</li><li id="mrs_01_0960__li1497215532557">For MRS 3.<em id="mrs_01_0960__i1641013271148">x</em> or later, log in to FusionInsight Manager. For details, see <a href="mrs_01_2124.html">Accessing FusionInsight Manager (MRS 3.x or Later)</a>. And choose <strong id="mrs_01_0960__b1089942910413">Cluster</strong> > <em id="mrs_01_0960__i18899172917416">Name of the desired cluster</em> > <strong id="mrs_01_0960__b99002029843">Services</strong> > <strong id="mrs_01_0960__b1090010290412">Hive</strong> > <strong id="mrs_01_0960__b7901132910418">Configurations</strong> > <strong id="mrs_01_0960__b690192917410">All Configurations</strong>.</li></ul>
|
|
</p></li><li id="mrs_01_0960__li051003218413"><span>Enter the parameter name in the search box, search for <strong id="mrs_01_0960__b119651230203711">hive.security.temporary.function.need.admin</strong>, change the parameter value to <strong id="mrs_01_0960__b109721130183710">true</strong> or <strong id="mrs_01_0960__b17975123020373">false</strong>, and restart all HiveServer instances.</span><p><div class="note" id="mrs_01_0960__note451019321446"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="mrs_01_0960__ul551123211414"><li id="mrs_01_0960__li185114328415">If this parameter is set to <strong id="mrs_01_0960__b810678163414">true</strong>, the ADMIN permission is required for creating temporary functions, which is the same as that in the open source community.</li><li id="mrs_01_0960__li1351114324417">If this parameter is set to <strong id="mrs_01_0960__b9244163313417">false</strong>, the ADMIN permission is not required for creating temporary functions.</li></ul>
|
|
</div></div>
|
|
</p></li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="mrs_01_0581.html">Using Hive</a></div>
|
|
</div>
|
|
</div>
|
|
|