[
https://issues.apache.org/jira/browse/IMPALA-6451?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Fredy Wijaya resolved IMPALA-6451.
----------------------------------
Resolution: Fixed
Fix Version/s: Impala 2.12.0
Impala 3.0
> Creating a Kudu table with CTAS fails with AuthorizationException: User
> 'username' does not have privileges to access: server1
> ------------------------------------------------------------------------------------------------------------------------------
>
> Key: IMPALA-6451
> URL: https://issues.apache.org/jira/browse/IMPALA-6451
> Project: IMPALA
> Issue Type: Bug
> Components: Frontend, Security
> Affects Versions: Impala 2.8.0, Impala 2.9.0, Impala 2.10.0, Impala 2.11.0
> Reporter: Tomas Farkas
> Assignee: Fredy Wijaya
> Priority: Critical
> Labels: security, usability
> Fix For: Impala 3.0, Impala 2.12.0
>
>
> In a Sentry enabled Kerberized environment user cannot create a Kudu table
> from a SELECT statement if it has a function, even though it has an ALL
> privilege on work database.
>
> {quote}create table work.tfsource ( i bigint , s string );
> insert into work.tfsource select 1, 'Test row';
> create table work.tfdest primary key ( i ) partition by hash ( i ) partitions
> 5 stored as kudu as
> select `i`, `s`, {color:#205081}current_timestamp(){color} as ins_date from
> `work`.`tfsource` limit 5;
> {quote}
> {color:#ff0000}AuthorizationException: User '****' does not have privileges
> to access: server1{color}
> {quote}create table work.tfsource ( i bigint , s string );
> insert into work.tfsource select 1, 'Test row';
> create table work.tfdest primary key ( i ) partition by hash ( i ) partitions
> 5 stored as kudu as
> select `i`, `s`, 0 as ins_date from `work`.`tfsource` limit 5;
> {quote}
> {color:#14892c}Inserted 1 row(s){color}
> {color:#14892c} {color}
> *It seems that if in the select statement is any function (tested now(),
> day("2018-02-16"0) then it requires server level ALL priviliges.*
> *{{Kudu version:}}*
> {{kudu 1.5.0-cdh5.13.1 revision 9044f1f377a6f2044d800600e5c2dc5e989c4dd4
> build type RELEASE built by jenkins at 09 Nov 2017 08:50:42 PST on
> impala-ec2-pkg-centos-7-0c27.vpc.cloudera.com build id 2017-11-09_08-09-26}}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
