[SENTRY-2359] Object owner is unable to grant privileges: SentryAccessDeniedException

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Fix Version/s: 2.1.0
• Component/s: Sentry
• Assignee: Krishna Kalyan
• Reporter: Krishna Kalyan
• Created: 21/Aug/18 17:23
• Updated: 22/Aug/18 17:25
• Resolved: 22/Aug/18 17:25

Description

Steps to Reproduce:

Pre-req: 

Sentry configuration :  OO enable with GRANT.

Test user - WITH CREATE privileges on SERVER:

1. Test user - CREATE DATABASE db1;
2.  Admin user - CREATE ROLE new_role;
3. Test user - GRANT ALL ON DATABASE db1 TO ROLE new_role;

 

Actual Result : SentryAccessDeniedException:  is returned.

Sample Exception :

ERROR : Error processing Sentry command: usr_wmnxacyvujehjqyzqxud has no grant!.Please grant admin privilege to usr_wmnxacyvujehjqyzqxud.
ERROR : FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: usr_wmnxacyvujehjqyzqxud has no grant!
INFO : Completed executing command(queryId=hive_20180817123333_9157c8f7-8226-4c45-bd6f-257bb17e3861); Time taken: 0.025 seconds
0: jdbc:hive2://mk516-6.gce.cloudera.com:1000> Error: Error while processing statement: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: usr_wmnxacyvujehjqyzqxud has no grant! (state=08S01,code=1)

Expected Result :  Should be able to grant .

Issue Links

• links to: Code review Link