[HIVE-20104] Revoke privilege failure

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 1.1.0
• Component/s: Security
• Assignee: zhaoyingchao Assign to me
• Reporter: tu gongxuan
• Due: 31/Jul/18
• Created: 06/Jul/18 08:17
• Updated: 13/Jul/18 08:00

Description

I want to revoke the prilege from user,sometimes failure.

throught beeline ,show user likai privilege as following using show grant user likai;

0: jdbc:hive2://172.29.61.12:10000> show grant user likai;
INFO  : Compiling command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c): show grant user likai
INFO  : Semantic Analysis Completed
INFO  : Returning Hive schema: Schema(fieldSchemas:[FieldSchema(name:database, type:string, comment:from deserializer), FieldSchema(name:table, type:string, comment:from deserializer), FieldSchema(name:partition, type:string, comment:from deserializer), FieldSchema(name:column, type:string, comment:from deserializer), FieldSchema(name:principal_name, type:string, comment:from deserializer), FieldSchema(name:principal_type, type:string, comment:from deserializer), FieldSchema(name:privilege, type:string, comment:from deserializer), FieldSchema(name:grant_option, type:boolean, comment:from deserializer), FieldSchema(name:grant_time, type:bigint, comment:from deserializer), FieldSchema(name:grantor, type:string, comment:from deserializer)], properties:null)
INFO  : Completed compiling command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c); Time taken: 0.001 seconds
INFO  : Executing command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c): show grant user likai
INFO  : Starting task [Stage-0:DDL] in serial mode
INFO  : Completed executing command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c); Time taken: 0.041 seconds
INFO  : OK
------------------------------------------------------------------------------------------------------------------------------------

database

table

partition

column

principal_name

principal_type

privilege

grant_option

grant_time

grantor

------------------------------------------------------------------------------------------------------------------------------------

tmp				likai	USER	SELECT	false	1476865827000	admin
tmp	0530_zhonganbaimingdan			likai	USER	SELECT	false	1527755292000	admin
tmp	aes_20180307			likai	USER	ALL	true	1520405354000	likai
tmp	houyue_20180523			likai	USER	ALL	true	1527064113000	likai
tmp	houyue_3des_20180809			likai	USER	ALL	true	1518155793000	likai
tmp	houyue_encry_20180208			likai	USER	ALL	true	1518071185000	likai
tmp	houyue_encry_base64_20180208			likai	USER	ALL	true	1518079661000	likai
tmp	houyue_test_20180127			likai	USER	ALL	true	1517034444000	likai

------------------------------------------------------------------------------------------------------------------------------------
8 rows selected (0.054 seconds)

 

0: jdbc:hive2://172.29.61.12:10000> revoke select on database tmp from user likai;
INFO  : Compiling command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355): revoke select on database tmp from user likai
INFO  : Semantic Analysis Completed
INFO  : Returning Hive schema: Schema(fieldSchemas:null, properties:null)
INFO  : Completed compiling command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355); Time taken: 0.001 seconds
INFO  : Executing command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355): revoke select on database tmp from user likai
INFO  : Starting task [Stage-0:DDL] in serial mode
ERROR : FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. org.apache.hadoop.hive.ql.metadata.HiveException: org.apache.thrift.transport.TTransportException
INFO  : Completed executing command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355); Time taken: 1.044 seconds
Error: Error while processing statement: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. org.apache.hadoop.hive.ql.metadata.HiveException: org.apache.thrift.transport.TTransportException (state=08S01,code=1)

 

if I grant another privilege to user likai,and revoke the privilege from likai rightnow, it works.

but sometimes (not right now), it failure