[IMPALA-1805] Impala's ACLs check do not consider all group ACLs, only checked first one.

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: Impala 2.1
• Fix Version/s: Impala 2.2
• Assignee: Juan Yu
• Reporter: Juan Yu
• Created: 24/Feb/15 01:28
• Updated: 20/Dec/15 00:05
• Resolved: 26/Feb/15 16:00

Description

After enabling HDFS synchronization with Sentry and set proper acl permission.
hdfs dfs -getfacl /user/hive/warehouse

1. file: /user/hive/warehouse
2. owner: hive
3. group: hive
   user::rwx
   user:hive:rwx
   group::---
   group:hive:rwx
   group:daisuke:rwx
   mask::rwx
   other::--x

all insert queries to those tables fails.
insert into movie2 select 1;
Query: insert into movie2 select 1
ERROR: AnalysisException: Unable to INSERT into target table (default.movie2) because Impala does not have WRITE access to at least one HDFS path: hdfs://dice.lab.cloudera.com:8020/user/hive/warehouse/movie2