Lenni Kuff created SENTRY-516:
---------------------------------

             Summary: Improve auth failure error message when user has no 
privileges on a URI
                 Key: SENTRY-516
                 URL: https://issues.apache.org/jira/browse/SENTRY-516
             Project: Sentry
          Issue Type: Bug
    Affects Versions: 1.5.0
            Reporter: Lenni Kuff


When a user does not have privileges on a URI, but does have all other 
privileges required to executed the operation, the error message message logged 
is a bit confusing:

{code}
Caused by: org.apache.hadoop.hive.ql.metadata.AuthorizationException: User 
<user> does not have privileges for CREATEFUNCTION
        at 
org.apache.sentry.binding.hive.authz.HiveAuthzBinding.authorize(HiveAuthzBinding.java:317)
{code}

Since the user does have privileges to execute the other parts of the DDL 
statement, it would be nice to clarify the failing part was due not having 
privileges on the URI.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to