Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-9024

get exception "AuthorizationException: User 'user_xql' does not have privileges to execute 'CREATE' on: default" on hue , even if set all privileges

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Blocker
    • Resolution: Unresolved
    • Affects Version/s: Impala 3.2.0
    • Fix Version/s: None
    • Component/s: Frontend
    • Labels:
      None
    • Epic Color:
      ghx-label-11

      Description

      I integrated impala and sentry of cdh6.3.0 in hue and gave impala server level "all" permissions, but I found that any Submission on hue showed no permission to execute(oprate on hue!). After debug, it was found that sentry would call bitFieldActionFactory. getActionByName (policy Value) to find "all" action, but Action "all" in Privilege class was defined as *, so resulted in null return and failed privilege validation.

      so I think change the code in Privilege.java like this can solve problem

       ALL("all",
              SELECT.getCode() |
              INSERT.getCode() |
              ALTER.getCode() |
              CREATE.getCode() |
              DROP.getCode() |
              REFRESH.getCode())
      

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              weiliangwei liangwei wei
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated: