[
https://issues.apache.org/jira/browse/IMPALA-9024?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
liangwei wei updated IMPALA-9024:
---------------------------------
Description:
I integrated impala and sentry of cdh6.3.0 in hue and gave impala server level
"all" permissions, but I found that any Submission on hue showed no permission
to execute(oprate on hue!). After debug, it was found that sentry would call
bitFieldActionFactory. getActionByName (policy Value) to find "all" action, but
Action "all" in Privilege class was defined as *, so resulted in null return
and failed privilege validation.
so I think change the code in Privilege.java like this can solve problem
{code:java}
ALL("all",
SELECT.getCode() |
INSERT.getCode() |
ALTER.getCode() |
CREATE.getCode() |
DROP.getCode() |
REFRESH.getCode())
{code}
was:
I integrated impala and sentry of cdh6.3.0 in hue and gave impala server level
"all" permissions, but I found that any Submission on hue showed no permission
to execute. After debug, it was found that sentry would call
bitFieldActionFactory. getActionByName (policy Value) to find "all" action, but
Action "all" in Privilege class was defined as *, so resulted in null return
and failed privilege validation.
so I think change the code in Privilege.java like this can solve problem
{code:java}
ALL("all",
SELECT.getCode() |
INSERT.getCode() |
ALTER.getCode() |
CREATE.getCode() |
DROP.getCode() |
REFRESH.getCode())
{code}
Summary: get exception "AuthorizationException: User 'user_xql' does
not have privileges to execute 'CREATE' on: default" on hue , even if set all
privileges (was: AuthorizationException: User 'user_xql' does not have
privileges to execute 'CREATE' on: default even if set all privileges )
> get exception "AuthorizationException: User 'user_xql' does not have
> privileges to execute 'CREATE' on: default" on hue , even if set all
> privileges
> -----------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: IMPALA-9024
> URL: https://issues.apache.org/jira/browse/IMPALA-9024
> Project: IMPALA
> Issue Type: Improvement
> Components: Frontend
> Affects Versions: Impala 3.2.0
> Reporter: liangwei wei
> Priority: Major
>
> I integrated impala and sentry of cdh6.3.0 in hue and gave impala server
> level "all" permissions, but I found that any Submission on hue showed no
> permission to execute(oprate on hue!). After debug, it was found that sentry
> would call bitFieldActionFactory. getActionByName (policy Value) to find
> "all" action, but Action "all" in Privilege class was defined as *, so
> resulted in null return and failed privilege validation.
> so I think change the code in Privilege.java like this can solve problem
> {code:java}
> ALL("all",
> SELECT.getCode() |
> INSERT.getCode() |
> ALTER.getCode() |
> CREATE.getCode() |
> DROP.getCode() |
> REFRESH.getCode())
> {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
