hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Eugene Chung (Jira)" <>
Subject [jira] [Updated] (HIVE-23296) Setting Tez caller ID with the Hive session user
Date Fri, 24 Apr 2020 10:26:00 GMT


Eugene Chung updated HIVE-23296:
    Attachment: HIVE-23296.01.patch
        Status: Patch Available  (was: Open)

> Setting Tez caller ID with the Hive session user
> ------------------------------------------------
>                 Key: HIVE-23296
>                 URL:
>             Project: Hive
>          Issue Type: Improvement
>          Components: Tez
>            Reporter: Eugene Chung
>            Assignee: Eugene Chung
>            Priority: Major
>         Attachments: HIVE-23296.01.patch, Screen Shot 2020-04-24 at 17.20.34.png
> On the kerberized Hadoop environment, a submitter of an YARN job is the name part of
the Hive server principal. A caller ID of the job is made of the OS user of the Hive server
> The view and modify ACLs of the Hive server admin for all Tez tasks are set by org.apache.hadoop.hive.ql.exec.tez.TezTask#setAccessControlsForCurrentUser()
so that the admin can see all tasks from tez-ui. But the admin hardly knows who executed each
> I suggest to change the caller ID to include the actual Hive user. If the user is not
known, the OS user of the Hive server process is included as is.
> The attached picture shows that 'Caller ID' includes 'user1' which is the Kerberos user
name of the actual Hive user.
> !Screen Shot 2020-04-24 at 17.20.34.png|width=683,height=29!

This message was sent by Atlassian Jira

View raw message