[SENTRY-739] when user doesn't have admin privileges, show grant throw exception, better improve error message

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.0
• Fix Version/s: 1.6.0
• Component/s: Hive Plugin
• Assignee: Colin
• Reporter: Anne Yu
• Created: 18/May/15 20:47
• Updated: 06/Sep/15 03:26
• Resolved: 26/Aug/15 05:56

Description

Better to improve the below error message to instruct user to grant admin privilege.

0: jdbc:hive2://a2110.halxg.cloudera.com:1000> SHOW GRANT ROLE lktfddwe_role_7 ON TABLE lktfddwe_db_1.tab_4;
ERROR : Error processing Sentry command: Access denied to systest. Server Stacktrace: org.apache.sentry.provider.db.SentryAccessDeniedException: Access denied to systest
	at org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessor.list_sentry_privileges_by_role(SentryPolicyStoreProcessor.java:491)
	at org.apache.sentry.provider.db.service.thrift.SentryPolicyService$Processor$list_sentry_privileges_by_role.getResult(SentryPolicyService.java:973)
	at org.apache.sentry.provider.db.service.thrift.SentryPolicyService$Processor$list_sentry_privileges_by_role.getResult(SentryPolicyService.java:958)
	at sentry.org.apache.thrift.ProcessFunction.process(ProcessFunction.java:39)
	at sentry.org.apache.thrift.TBaseProcessor.process(TBaseProcessor.java:39)
	at org.apache.sentry.provider.db.service.thrift.SentryProcessorWrapper.process(SentryProcessorWrapper.java:48)
	at sentry.org.apache.thrift.TMultiplexedProcessor.process(TMultiplexedProcessor.java:123)
	at sentry.org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:285)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
	at java.lang.Thread.run(Thread.java:745)

Error: Error while processing statement: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: Access denied to systest (state=08S01,code=1)