[HIVE-21532] RuntimeException due to AccessControlException during creating hive-staging-dir - ASF JIRA

Log work

Agile Board

Rank to Top

Rank to Bottom

Bulk Copy Attachments

Bulk Move Attachments

Add vote

Voters

Watch issue

Watchers

Create sub-task

Convert to sub-task

Move

Link

Clone

Labels

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Bug
Status: Patch Available
Priority: Minor
Resolution: Unresolved
Affects Version/s: None
Fix Version/s: None
Component/s: None
Labels:
None

Description

The bug was found with environment - Hive-2.3.

Steps lead to an exception:
1) Create user without root permissions on your node.
2) The hive-site.xml file has to contain the next properties:

 <property>
    <name>hive.security.authorization.enabled</name>
  <value>true</value>
  </property>
  <property>
   <name>hive.security.authorization.manager</name>
 <value>org.apache.hadoop.hive.ql.security.authorization.plugin.fallback.FallbackHiveAuthorizerFactory</value>
  </property>

3) Open Hive CLI and do next query:

 insert overwrite local directory '/tmp/test_dir' row format delimited fields terminated by ',' select * from temp.test;

The previous query will fails with the next exception:

FAILED: RuntimeException Cannot create staging directory 'hdfs:///tmp/test_dir/.hive-staging_hive_2019-03-28_11-51-05_319_5882446299335967521-1': User testuser(user id 3456)  has been denied access to create .hive-staging_hive_2019-03-28_11-51-05_319_5882446299335967521-1

The investigation shows that if delete the mentioned above properties from hive-site.xml and pass `queryTmpdir` instead of `dest_path` in the org.apache.hadoop.hive.ql.Context#getTempDirForPath() as was in the Hive-2.1. everything will be fine. The current method is using in the org.apache.hadoop.hive.ql.parse.SemanticAnalyzer - String statsTmpLoc = ctx.getTempDirForPath(dest_path).toString();