Uploaded image for project: 'Sentry'
  1. Sentry
  2. SENTRY-1311

Improve usability of URI privileges by supporting mixed use of URIs with and without scheme

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.6.0
    • Fix Version/s: 1.8.0
    • Component/s: URI
    • Labels:
      None

      Description

      If URI has scheme when granting URI privileges, e.g. "grant all on uri 'hdfs:///path/to/table' to role <user-role>", subsequent table creation using URI without scheme "create external table tab1 (s string) location '/path/to/table'" fails with org.apache.hadoop.hive.ql.metadata.AuthorizationException: User <user-name> does not have privileges for CREATETABLE

        Attachments

        1. SENTRY-1311.001.patch
          6 kB
          Vadim Spector
        2. SENTRY-1311.002.patch
          7 kB
          Vadim Spector
        3. SENTRY-1311.003.patch
          15 kB
          Vadim Spector
        4. SENTRY-1311.004.patch
          15 kB
          Vadim Spector

          Activity

            People

            • Assignee:
              vspector VS
              Reporter:
              vspector@gmail.com Vadim Spector
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: