[HIVE-7089] StorageBasedAuthorizationProvider fails to allow non-admin users to create databases in writable directories

• Type: Bug
• Status: In Progress
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.13.0
• Assignee: Oleksiy Sayankin
• Reporter: Craig Condit
• Created: 19/May/14 16:54
• Updated: 31/Jan/20 15:48

Description

When attempting to create a database with a custom location and using
hive.security.authorizationmanager=org.apache.hadoop.hive.ql.security.authorization.StorageBasedAuthorizationProvider, an AccessControlException is generated for the default warehouse location, not the location which was given in the create database command.

hive> create database test LOCATION '/user/ccondit/test';                                         
Authorization failed:java.security.AccessControlException: action WRITE not permitted on path hdfs://example.com:8020/apps/hive/warehouse for user ccondit. Use SHOW GRANT to get more details.
14/05/19 09:50:59 ERROR ql.Driver: Authorization failed:java.security.AccessControlException: action WRITE not permitted on path hdfs://example.com:8020/apps/hive/warehouse for user ccondit. Use SHOW GRANT to get more details.