Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-1226

ranger policy is not working on the hbase namespaces

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Critical
    • Resolution: Unresolved
    • 0.7.0
    • None
    • Ranger
    • None

    Description

      Scenario:
      1. do grant for user 'user1' on default namespace as follows:
      grant 'user1 , 'RWCA' , '@default'
      2. then see at ranger side one policy gets created since this is grant operation
      3. then try to create table in the same namesapce , even by default it will go in default namespace

      hbase(main):001:0> create 't1' , 'c1'

ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for user 'user1@EXAMPLE.COM' (action=create)


hbase(main):002:0> create 'default:t1' , 'c1'

ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for user 'user1@EXAMPLE.COM' (action=create)

      issue: even if permission is there, then also creation of table fails.

      Attachments

        Activity

          People

            Unassigned Unassigned
            deepakhuawei Deepak Sharma
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: