Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-3657

Permission upon insert are wrong in hive warehouse table files

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Minor
    • Resolution: Not A Bug
    • Impala 2.2.3
    • None
    • Security
    • Cluster is Kerberized and has sentry

    Description

      Found an issue with permissions on warehouse.
      The Warehouse /user/hive/warehouse was set to owner hive:hive with 771 permissions recursively. User was granted write privilege on table (tbl-1) on database (db-1).
      Initially all grants were done with beeline.
      Next the user switched to impala-shell and inserted some data into tbl-1. The permissions on the new hdfs file was the following:
      ownership : impala:hive
      permissions: 751 i.e. read and execute on group.

      The user cannot use insert overwrite via beeline sine the group hive has read only permissions.

      The documentation: http://www.cloudera.com/documentation/enterprise/latest/topics/impala_insert.html has the following:

      Related startup options:

      By default, if an INSERT statement creates any new subdirectories underneath a partitioned table, those subdirectories are assigned default HDFS permissions for the impala user. To make each subdirectory have the same permissions as its parent directory in HDFS, specify the --insert_inherit_permissions startup option for the impalad daemon.

      Attachments

        Activity

          People

            tarmstrong Tim Armstrong
            bchander_impala_0348 Bala Chander
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: