一、acl权限

1、设置acl权限
hadoop fs -setfacl -R -m user:ly.feng:rw- /user/hive/warehouse/ucar.db/t_b_city

2、删除用户acl权限
hadoop fs -setfacl -x user:ly.feng /user/hive-0.13.1/warehouse/ucar.db/t_b_city

3、删除所有acl权限
setfacl -b /user/hive-0.13.1/warehouse/ucar.db/t_b_city

二、
1、创建角色
CREATE ROLE role_name;

2、 删除角色
DROP ROLE role_name;

3、设置角色
SET ROLE (role_name|ALL|NONE);

4、 查看当前具有的角色
SHOW CURRENT ROLES;

5、查看所有存在的角色
SHOW ROLES;

6、查看角色权限
show grant role role_name on database db_name;
show grant role role_name on [table] t_name;

8、角色赋予用户
grant role role_name to user user_name

7、查看某用户的所有角色
show role grant user user_name

8、赋予角色权限
grant select on database db_name to role role_name;
grant select on [table] t_name to role role_name;

9、赋予用户权限
grant select on database default to user admin;
grant select on table ppdata to user admin;

10、赋予组权限
grant select on database default to group admin;
grant select on table ppdata to group admin;

11、赋予角色权限
grant select on database default to role admin;
grant select on table ppdata to role admin;

12、收回用户权限
revoke select on database default from user username;
revoke select on table ppdata from user username;

13、回收角色权限
revoke select on database db_name from role role_name;
revoke select on [table] t_name from role role_name;