[
https://issues.apache.org/jira/browse/RANGER-2858?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Abhay Kulkarni updated RANGER-2858:
-----------------------------------
Description:
When user has permissions on a few of the databases in security zone policies,
"show databases" command is expected to list databases on which the user has
some permission in any security zone(s). However, the command fails with the
following message.
============
FAILED: HiveAccessControlException Permission denied: user [behemoth] does not
have [USE] privilege on [Unknown resource!!]
org.apache.hadoop.hive.ql.security.authorization.plugin.HiveAccessControlException:
Permission denied: user [behemoth] does not have [USE] privilege on [Unknown
resource!!]
at
org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizer.checkPrivileges(RangerHiveAuthorizer.java:487)
============
Furthermore, command "use <database>" where <database> is name of the database
where user has some access in any security zone, succeeds.
was:
However, I have issues while performing -
* show databases;
When user has permissions on a few of the databases in security zone policies,
"show databases" command is expected to list databases on which the user has
some permission in any security zone(s). However, the command fails with the
following message.
============
FAILED: HiveAccessControlException Permission denied: user [behemoth] does not
have [USE] privilege on [Unknown resource!!]
org.apache.hadoop.hive.ql.security.authorization.plugin.HiveAccessControlException:
Permission denied: user [behemoth] does not have [USE] privilege on [Unknown
resource!!]
at
org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizer.checkPrivileges(RangerHiveAuthorizer.java:487)
============
Furthermore, command "use <database>" where <database> is name of the database
where user has some access in any security zone, succeeds.
> "Show databases" gives permission denied error, even though the user has
> permissions on a few of the databases in security zone policies
> ----------------------------------------------------------------------------------------------------------------------------------------
>
> Key: RANGER-2858
> URL: https://issues.apache.org/jira/browse/RANGER-2858
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Affects Versions: 2.0.0
> Reporter: Abhay Kulkarni
> Assignee: Abhay Kulkarni
> Priority: Major
> Fix For: 2.1.0
>
>
> When user has permissions on a few of the databases in security zone
> policies, "show databases" command is expected to list databases on which the
> user has some permission in any security zone(s). However, the command fails
> with the following message.
> ============
> FAILED: HiveAccessControlException Permission denied: user [behemoth] does
> not have [USE] privilege on [Unknown resource!!]
>
> org.apache.hadoop.hive.ql.security.authorization.plugin.HiveAccessControlException:
> Permission denied: user [behemoth] does not have [USE] privilege on [Unknown
> resource!!]
> at
> org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizer.checkPrivileges(RangerHiveAuthorizer.java:487)
> ============
> Furthermore, command "use <database>" where <database> is name of the
> database where user has some access in any security zone, succeeds.
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
