[ 
https://issues.apache.org/jira/browse/SENTRY-922?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Eric Lin updated SENTRY-922:
----------------------------
    Description: 
Run the following command with correct URI permissions:

{code}
INSERT OVERWRITE DIRECTORY '/tmp/test' select * FROM sample_07 LIMIT 100;
{code}

without "LOCAL" keyword, sentry will complain the following:

{code}
Error: Error while compiling statement: FAILED: SemanticException No valid 
privileges
 Required privileges for this query: 
Server=server1->URI=file:///tmp/test->action=*; (state=42000,code=40000)
{code}

However, after giving permission to "file:///tmp/test", query finished with 
data in "hdfs:///tmp/test", even though no permission to "hdfs:///tmp/test"

  was:
Run the following command:

{code}
INSERT OVERWRITE DIRECTORY '/tmp/test' select * FROM sample_07 LIMIT 100;
{code}

without "LOCAL" keyword, sentry will complain the following:

{code}
Error: Error while compiling statement: FAILED: SemanticException No valid 
privileges
 Required privileges for this query: 
Server=server1->URI=file:///tmp/test->action=*; (state=42000,code=40000)
{code}

However, after giving permission to "file:///tmp/test", query finished with 
data in "hdfs:///tmp/test", even though no permission to "hdfs:///tmp/test"


> INSERT OVERWRITE DIRECTORY permission not working correctly
> -----------------------------------------------------------
>
>                 Key: SENTRY-922
>                 URL: https://issues.apache.org/jira/browse/SENTRY-922
>             Project: Sentry
>          Issue Type: Bug
>          Components: Sentry
>    Affects Versions: 1.4.0
>            Reporter: Eric Lin
>
> Run the following command with correct URI permissions:
> {code}
> INSERT OVERWRITE DIRECTORY '/tmp/test' select * FROM sample_07 LIMIT 100;
> {code}
> without "LOCAL" keyword, sentry will complain the following:
> {code}
> Error: Error while compiling statement: FAILED: SemanticException No valid 
> privileges
>  Required privileges for this query: 
> Server=server1->URI=file:///tmp/test->action=*; (state=42000,code=40000)
> {code}
> However, after giving permission to "file:///tmp/test", query finished with 
> data in "hdfs:///tmp/test", even though no permission to "hdfs:///tmp/test"



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to