Uploaded image for project: 'Apache Trafodion (Retired)'
  1. Apache Trafodion (Retired)
  2. TRAFODION-1095

LP Bug: 1437078 - LOAD fails with error 4481 even if user has priv

    XMLWordPrintableJSON

Details

    Description

      A load operation is failing even when the user has the necessary privileges.

      Setup:

      Create a hive table:

      swhive

      drop table teams;
      create external table teams
      (team_number int,
      team_name string,
      team_contact string,
      team_contact_number string
      )
      row format delimited fields terminated by '|'
      location '/user/hive/exttables/teams'
      ;
      show tables;
      quit;

      Load hive table in SQL:

      sqlci

      initialize authorization;
      insert into hive.hive.teams values
      (1, 'White Socks', 'Sam','4082282222'),
      (2, 'Giants', 'Joe', '5102839483'),
      (3, 'Cardinals', 'Stella', '9513849384'),
      (4, 'Indians', 'Matt', '5128383748'),
      (5, 'Tigers', 'Ronit', '6198273827');
      Select count from hive.hive.teams;
      exit;

      In window 1:

      sqlci –u sql_user1

      create schema user1;
      set schema user1;
      create table teams
      (team_number int not null primary key,
      team_name char(20) not null,
      team_contact varchar(50) not null,
      team_contact_number char (10) not null
      )
      ;

      In window 2:

      Sqlci –u sql_user2

      Set schema user1;
      Load with no populate indexes into user1.teams select * from hive.hive.teams;

      --should fail with no INSERT and SELECT priv

      Back to window 1

      Grant insert, select on user1.teams to sql_user2;
      Showddl user1.teams;

      Back to window 2 – load operations should work but it is still failing

      Load with no populate indexes into user1.teams select * from hive.hive.teams;

      If I restart window 2, the operation succeeds.

      It looks like the table definition cached in NATableCache is not being removed if the table does not have the necessary privileges. On next call, the incorrect cached values are used for privilege checking instead of the correct values.

      Attachments

        Activity

          People

            rmarton Roberta Marton
            rmarton Roberta Marton
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: