[HIVE-28482] Iceberg: CTAS, CTLT query failure while fetching URI for authorization

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.1.0, 4.0.1
• Labels: hive-4.0.1-merged hive-4.0.1-must pull-request-available
• Assignee: Sourabh Badhya
• Reporter: Sourabh Badhya
• Created: 27/Aug/24 07:51
• Updated: 24/Sep/24 02:15
• Resolved: 30/Aug/24 15:33

Description

When we perform CTAS query with the following configs set to true - 

set hive.security.authorization.enabled=true;
set hive.security.authorization.tables.on.storagehandlers=true;

create table ctas_source stored by iceberg stored as orc as select * from src;

The following error trace is seen - 

Caused by: org.apache.hadoop.hive.ql.metadata.HiveException: Exception occurred while getting the URI from storage handler: null
        at org.apache.hadoop.hive.ql.security.authorization.command.CommandAuthorizerV2.addHivePrivObject(CommandAuthorizerV2.java:213)
        at org.apache.hadoop.hive.ql.security.authorization.command.CommandAuthorizerV2.getHivePrivObjects(CommandAuthorizerV2.java:152)
        at org.apache.hadoop.hive.ql.security.authorization.command.CommandAuthorizerV2.doAuthorization(CommandAuthorizerV2.java:77)
        at org.apache.hadoop.hive.ql.security.authorization.command.CommandAuthorizer.doAuthorization(CommandAuthorizer.java:58)

 

 

Issue Links

• links to: GitHub Pull Request #5414