Uploaded image for project: 'Sentry'
  1. Sentry
  2. SENTRY-770

When use sentry to configuration hive,to ensure safety of data access.The functions(row_number and unbase64) can't be used.The Problem caused by a sentry bug. I have already found a way to solve the problem,except to modify the sentry source code.

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Duplicate
    • Affects Version/s: 1.4.0, 1.5.0
    • Fix Version/s: 1.6.0
    • Component/s: Hive Plugin
    • Labels:

      Description

      When use sentry to configuration hive,to ensure safety of data access.The functions(row_number and unbase64) can't be used.The Problem caused by a sentry bug. This bug is also in the lastest version apache-sentry-1.5.0-incubating-src.tar.gz.
      The Error Found In That the hiveserver2 Log Print Is Below:
      [Hive Server2-Handler-Pool': Thread-19]: ERROR ql.Driver: FAILED: SemanticException No valid privileges
      Required privileges for this query:
      org.apache.hadoop.hive.ql.parse.SemanticException: No vaild privileges
      Required privileges for this query:
      at org.apache.sentry.binding.hive.HiveAuthzBindingHook.postAnalyze(HiveAuthzBindingHook.java:342)
      at org.apache.hadoop.hive.ql.Driver.compile(Driver.java:440)
      at org.apache.hadoop.hive.ql.Driver.compile(Driver.java:335)
      ......
      ......
      ......
      Caused by: org.apache.hadoop.hive.ql.metadata.AuthorizationException: The UDF unbase64 is not found in the list of allowed UDFs
      at org.apache.sentry.binding.hive.HiveAuthzBindingHook.checkUDFWhiteList(HiveAuthzBindingHook.java:556)
      at org.apache.sentry.binding.hive.HiveAuthzBindingHook.authorizeWithHiveBindings(HiveAuthzBindingHook.java:454)
      at org.apache.sentry.binding.hive.HiveAuthzBindingHook.postAnalyze(HiveAuthzBindingHook.java:332)
      ... 33 more

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                jingyingHu jingyingHu
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: