[ https://issues.apache.org/jira/browse/HIVE-20072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16536821#comment-16536821 ]
Hive QA commented on HIVE-20072: -------------------------------- Here are the results of testing the latest attachment: https://issues.apache.org/jira/secure/attachment/12930798/HIVE-20072.02.patch {color:red}ERROR:{color} -1 due to no test(s) being added or modified. {color:red}ERROR:{color} -1 due to 1 failed/errored test(s), 14620 tests executed *Failed tests:* {noformat} org.apache.hadoop.hive.ql.exec.tez.TestDynamicPartitionPruner.testSingleSourceMultipleFiltersOrdering1 (batchId=303) {noformat} Test results: https://builds.apache.org/job/PreCommit-HIVE-Build/12486/testReport Console output: https://builds.apache.org/job/PreCommit-HIVE-Build/12486/console Test logs: http://104.198.109.242/logs/PreCommit-HIVE-Build-12486/ Messages: {noformat} Executing org.apache.hive.ptest.execution.TestCheckPhase Executing org.apache.hive.ptest.execution.PrepPhase Executing org.apache.hive.ptest.execution.YetusPhase Executing org.apache.hive.ptest.execution.ExecutionPhase Executing org.apache.hive.ptest.execution.ReportingPhase Tests exited with: TestsFailedException: 1 tests failed {noformat} This message is automatically generated. ATTACHMENT ID: 12930798 - PreCommit-HIVE-Build > Write access being requested when performing select on a table > -------------------------------------------------------------- > > Key: HIVE-20072 > URL: https://issues.apache.org/jira/browse/HIVE-20072 > Project: Hive > Issue Type: Bug > Components: HiveServer2 > Reporter: mahesh kumar behera > Assignee: mahesh kumar behera > Priority: Critical > Attachments: HIVE-20072.01.patch, HIVE-20072.02.patch > > > hive.exec.pre.hooks=org.apache.hadoop.hive.ql.hooks.UpdateInputAccessTimeHook$PreExec > along with hive doAs=true > which is causing to perform Alter table operation internally when accessed > Hive table, and results in HiveException with Write access to table directory. > Select access is provided to a table and when performing select * for that > table, below exception is seen. > > Steps to reproduce. (with ranger enabled) > 1. Create test table > create table lastaccesstime (id int); > 2. Enable Hive doAs > 3. update > hive.exec.pre.hooks=org.apache.hadoop.hive.ql.hooks.ATSHook,org.apache.hadoop.hive.ql.hooks.UpdateInputAccessTimeHook$PreExec > 4. Perform select on table lastaccesstime as non-hive user and exception will > be thrown. > {code:java} > 0: jdbc:hive2://example.com:> select * from lastaccesstime; > Error: Error while processing statement: FAILED: Hive Internal Error: > org.apache.hadoop.hive.ql.metadata.HiveException(Unable to alter table. > java.security.AccessControlException: Permission denied: user=kafka, > access=WRITE, > inode="/apps/hive/warehouse/testdb.db/lastaccesstime":hive:hadoop:drwxr-x--- > at > org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.check(FSPermissionChecker.java:353) > at > org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.checkPermission(FSPermissionChecker.java:252) > at > org.apache.ranger.authorization.hadoop.RangerHdfsAuthorizer$RangerAccessControlEnforcer.checkDefaultEnforcer(RangerHdfsAuthorizer.java:427) > at > org.apache.ranger.authorization.hadoop.RangerHdfsAuthorizer$RangerAccessControlEnforcer.checkPermission(RangerHdfsAuthorizer.java:303) > at > org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.checkPermission(FSPermissionChecker.java:190) > at > org.apache.hadoop.hdfs.server.namenode.FSDirectory.checkPermission(FSDirectory.java:1950) > at > org.apache.hadoop.hdfs.server.namenode.FSDirectory.checkPermission(FSDirectory.java:1934) > at > org.apache.hadoop.hdfs.server.namenode.FSDirectory.checkPathAccess(FSDirectory.java:1908) > at > org.apache.hadoop.hdfs.server.namenode.FSNamesystem.checkAccess(FSNamesystem.java:8800) > at > org.apache.hadoop.hdfs.server.namenode.NameNodeRpcServer.checkAccess(NameNodeRpcServer.java:2089) > at > org.apache.hadoop.hdfs.protocolPB.ClientNamenodeProtocolServerSideTranslatorPB.checkAccess(ClientNamenodeProtocolServerSideTranslatorPB.java:1466) > at > org.apache.hadoop.hdfs.protocol.proto.ClientNamenodeProtocolProtos$ClientNamenodeProtocol$2.callBlockingMethod(ClientNamenodeProtocolProtos.java) > at > org.apache.hadoop.ipc.ProtobufRpcEngine$Server$ProtoBufRpcInvoker.call(ProtobufRpcEngine.java:640) > at org.apache.hadoop.ipc.RPC$Server.call(RPC.java:982) > at org.apache.hadoop.ipc.Server$Handler$1.run(Server.java:2351) > at org.apache.hadoop.ipc.Server$Handler$1.run(Server.java:2347) > at java.security.AccessController.doPrivileged(Native Method) > at javax.security.auth.Subject.doAs(Subject.java:422) > at > org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1869) > at org.apache.hadoop.ipc.Server$Handler.run(Server.java:2347) > ) (state=08S01,code=12) > {code} -- This message was sent by Atlassian JIRA (v7.6.3#76005)