Db2 Big SQL compatibility with Ranger plugins for other CDP services
Db2® Big SQL has compatibility with Ranger plugins for other CDP services, including HDFS, Hadoop SQL (Hive), and HBase.
If you attempt to create or drop a table with a LOCATION clause and the location is on HDFS, Db2 Big SQL performs an authorization check against the HDFS plugin to ensure the required level of access to perform the operation at that location. Subsequently, the Db2 Big SQL admin user will perform HDFS operations on behalf of the session user. Create a policy in the HDFS plugin that grants the bigsql user access to all HDFS locations where Db2 Big SQL users will work with tables.
Hadoop SQL (Hive)
When Ranger integration is enabled and an operation is performed against a Hadoop table, Db2 Big SQL performs authorization checks on the Hadoop SQL plugin. Db2 Big SQL only supports calling out to the Hadoop SQL plugin for authorization checks on Hadoop tables. Other features of the Hadoop SQL plugin are not supported, including the following items:
- URL policies
- HiveService policies
- UDF policies, which are managed by Db2 Big SQL
When Ranger integration is enabled and an operation is performed on an HBase table, Db2 Big SQL performs authorization checks on the HBase plugin.