[
https://issues.apache.org/jira/browse/IMPALA-7710?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16665917#comment-16665917
]
ASF subversion and git services commented on IMPALA-7710:
---------------------------------------------------------
Commit 8d628d7b62c4903bfd0236d2de150dae0752f0fe in impala's branch
refs/heads/master from [~aholley]
[ https://git-wip-us.apache.org/repos/asf?p=impala.git;h=8d628d7 ]
IMPALA-7710: test_owner_privileges_with_grant failed with AuthorizationException
The problem was acache consistency issue between impalad and catalogd.
Because a Sentry refresh was occuring during an update to privileges
from the alter table set owner, impalad had the correct privileges,
which allowed the "show grant role" to succeed but the privileges in
catalogd were being overwritten from the sentry refresh. Added a delay
in the drop call to ensure privileges are updated. This is a
workaround to get the tests to pass with the existing behaviour and
should be reassessed if IMPALA-7763 is implemented. This would add a
lock to possibly prevent this, but will need it's own assessment.
Testing:
- Ran custom cluster tests 50 times
Change-Id: I5a1babd3dcbb94ffaa1f3e6ef2cebf1a1d391219
Reviewed-on: http://gerrit.cloudera.org:8080/11786
Reviewed-by: Impala Public Jenkins <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
> test_owner_privileges_with_grant failed with AuthorizationException
> --------------------------------------------------------------------
>
> Key: IMPALA-7710
> URL: https://issues.apache.org/jira/browse/IMPALA-7710
> Project: IMPALA
> Issue Type: Bug
> Components: Frontend
> Affects Versions: Impala 3.1.0
> Reporter: Michael Ho
> Assignee: Adam Holley
> Priority: Blocker
> Labels: broken-build
>
> A build with the fix of IMPALA-7633 failed like the following.
> {noformat}
> authorization.test_owner_privileges.TestOwnerPrivileges.test_owner_privileges_with_grant[exec_option:
> {'batch_size': 0, 'num_nodes': 0, 'disable_codegen_rows_threshold': 0,
> 'disable_codegen': False, 'abort_on_error': 1,
> 'exec_single_node_rows_threshold': 0} | table_format: text/none] (from pytest)
> Failing for the past 1 build (Since Failed#35 )
> Took 1 min 39 sec.
> add description
> Error Message
> ImpalaBeeswaxException: ImpalaBeeswaxException: INNER EXCEPTION: <class
> 'beeswaxd.ttypes.BeeswaxException'> MESSAGE: AuthorizationException: User
> 'oo_user1' does not have privileges to execute 'DROP' on:
> test_owner_privileges_with_grant_77e49af8.owner_priv_view
> Stacktrace
> authorization/test_owner_privileges.py:165: in
> test_owner_privileges_with_grant
> sentry_refresh_timeout_s=SENTRY_REFRESH_TIMEOUT_S)
> authorization/test_owner_privileges.py:225: in __execute_owner_privilege_tests
> test_obj.obj_name), user="oo_user1")
> common/sentry_cache_test_suite.py:106: in user_query
> return self.execute_query_expect_success(client, query, user=user)
> common/impala_test_suite.py:523: in wrapper
> return function(*args, **kwargs)
> common/impala_test_suite.py:531: in execute_query_expect_success
> result = cls.__execute_query(impalad_client, query, query_options, user)
> common/impala_test_suite.py:621: in __execute_query
> return impalad_client.execute(query, user=user)
> common/impala_connection.py:160: in execute
> return self.__beeswax_client.execute(sql_stmt, user=user)
> beeswax/impala_beeswax.py:173: in execute
> handle = self.__execute_query(query_string.strip(), user=user)
> beeswax/impala_beeswax.py:339: in __execute_query
> handle = self.execute_query_async(query_string, user=user)
> beeswax/impala_beeswax.py:335: in execute_query_async
> return self.__do_rpc(lambda: self.imp_service.query(query,))
> beeswax/impala_beeswax.py:460: in __do_rpc
> raise ImpalaBeeswaxException(self.__build_error_message(b), b)
> E ImpalaBeeswaxException: ImpalaBeeswaxException:
> E INNER EXCEPTION: <class 'beeswaxd.ttypes.BeeswaxException'>
> E MESSAGE: AuthorizationException: User 'oo_user1' does not have
> privileges to execute 'DROP' on:
> test_owner_privileges_with_grant_77e49af8.owner_priv_view
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
