Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-1210

Ranger Hive Plugin does not throw an exception when an INSERT/DELETE grant is issued from beeline

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Minor
    • Resolution: Fixed
    • 0.6.1
    • 0.7.0
    • plugins
    • None

    Description

      beeline>grant insert on test10 to user userx;
      returns OK. But actually the hive log has a warning entry:
      grant/revoke: unexpected privilege type 'DELETE'. Ignored

      The policy is actually created but with no policy items. While the "UPDATE" grant properly sets up the policy item.

      According to https://cwiki.apache.org/confluence/display/RANGER/Hive+Commands+to+Ranger+Permission+Mapping

      Both INSERT and DELETE should be mapped to UPDATE.

      What user experiences is that the grant of INSERT/DELETE has no effect at all even the return status is good.

      So we should either throw an exception, or map the INSERT/DELETE to UPDATE in the "createGrantRevokeData" method of the "RangerHiveAuthorizer" class.

      Attachments

        Activity

          People

            Unassigned Unassigned
            yzhou2001 Yan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: