[HIVE-26707] Iceberg: Write failing due to Ranger Authorization failure

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.0.0-beta-1
• Component/s: Iceberg integration
• Labels: pull-request-available
• Assignee: Ayush Saxena
• Reporter: Ayush Saxena
• Created: 04/Nov/22 12:52
• Updated: 15/Aug/23 06:33
• Resolved: 08/Nov/22 09:20

Description

Caused by: java.lang.RuntimeException: MetaException(message:Permission denied: user [systest] does not have [RWSTORAGE] privilege on [iceberg%3A%2F%2Fspark_iceberg%2Fsimple_types_avro%3Fsnapshot%3D%2Fwarehouse%2Ftablespace%2Fexternal%2Fhive%2Fspark_iceberg.db%2Fsimple_types_avro%2Fmetadata%2F00000-50dd01bd-15d9-49bd-a970-80d89231d36c.metadata.json])
	at org.apache.iceberg.relocated.com.google.common.base.Throwables.propagate(Throwables.java:243)
	at org.apache.iceberg.common.DynMethods$UnboundMethod.invoke(DynMethods.java:80)
	at org.apache.iceberg.hive.MetastoreUtil.alterTable(MetastoreUtil.java:64)
	at org.apache.iceberg.hive.HiveTableOperations.lambda$persistTable$3(HiveTableOperations.java:322)
	at org.apache.iceberg.ClientPoolImpl.run(ClientPoolImpl.java:58)
	at org.apache.iceberg.ClientPoolImpl.run(ClientPoolImpl.java:51)
	at org.apache.iceberg.hive.CachedClientPool.run(CachedClientPool.java:76)
	at org.apache.iceberg.hive.HiveTableOperations.persistTable(HiveTableOperations.java:321)
	at org.apache.iceberg.hive.HiveTableOperations.doCommit(HiveTableOperations.java:277)
	... 36 more
Caused by: MetaException(message:Permission denied: user [systest] does not have [RWSTORAGE] privilege on [iceberg%3A%2F%2Fspark_iceberg%2Fsimple_types_avro%3Fsnapshot%3D%2Fwarehouse%2Ftablespace%2Fexternal%2Fhive%2Fspark_iceberg.db%2Fsimple_types_avro%2Fmetadata%2F00000-50dd01bd-15d9-49bd-a970-80d89231d36c.metadata.json])
	at org.apache.hadoop.hive.metastore.api.ThriftHiveMetastore$alter_table_req_result$alter_table_req_resultStandardScheme.read(ThriftHiveMetastore.java)
	at org.apache.hadoop.hive.metastore.api.ThriftHiveMetastore$alter_table_req_result$alter_table_req_resultStandardScheme.read(ThriftHiveMetastore.java)
	at org.apache.hadoop.hive.metastore.api.ThriftHiveMetastore$alter_table_req_result.read(ThriftHiveMetastore.java)
	at org.apache.thrift.TServiceClient.receiveBase(TServiceClient.java:88)
	at org.apache.hadoop.hive.metastore.api.ThriftHiveMetastore$Client.recv_alter_table_req(ThriftHiveMetastore.java:2978)
	at org.apache.hadoop.hive.metastore.api.ThriftHiveMetastore$Client.alter_table_req(ThriftHiveMetastore.java:2965)
	at org.apache.hadoop.hive.metastore.HiveMetaStoreClient.alter_table_with_environmentContext(HiveMetaStoreClient.java:482)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

Issue Links

• links to: GitHub Pull Request #3731