[RANGER-3142] Access control based on groups not working for presto plugin

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.1.0
• Component/s: plugins
• Environment: ranger-2.1.0-presto-plugin.tar.gz ; presto-server-347.tar.gz
• Assignee: Unassigned
• Reporter: Anchal Agarwal
• Created: 06/Jan/21 04:15
• Updated: 14/Feb/22 09:33

Description

I'm using ranger-2.1.0 for access control in prestosql-347.

A policy with user list in 'allow conditions' works i.e. if I connect to presto with a user in the allowed list, my query returns the expected results.

But instead of users, if I use group in the policy and try accessing presto with a user belonging to that group, then I'm denied access.

%presto
show tables in default

Query failed (#20210106_032741_00000_dddsy): Access Denied: Cannot access catalog hive