[SENTRY-922] INSERT OVERWRITE DIRECTORY permission not working correctly

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.0
• Fix Version/s: 1.7.0
• Component/s: Sentry
• Assignee: Yibing Shi
• Reporter: Eric Lin
• Created: 24/Oct/15 09:47
• Updated: 15/Mar/16 22:39
• Resolved: 11/Mar/16 01:22

Description

Run the following command with correct URI permissions:

INSERT OVERWRITE DIRECTORY '/tmp/test' select * FROM sample_07 LIMIT 100;

without "LOCAL" keyword, sentry will complain the following:

Error: Error while compiling statement: FAILED: SemanticException No valid privileges
 Required privileges for this query: Server=server1->URI=file:///tmp/test->action=*; (state=42000,code=40000)

However, after giving permission to "file:///tmp/test", query finished with data in "hdfs:///tmp/test", even though no permission to "hdfs:///tmp/test" was given.