Github user yaooqinn commented on the issue:

    https://github.com/apache/spark/pull/17335
  
    The dbs and tbls may be created on hdfs via the real user,so that the 
proxy user may have no rights to things such as:
    ```
    Error: java.lang.RuntimeException: Cannot create staging directory 
'hdfs://hz-test01/user/hive/warehouse/hzyaoqin.db/src2/.hive-staging_hive_2017-03-20_22-43-44_189_8479160175818973314-1':
 Permission denied: user=hzyaoqin, access=WRITE, 
inode="/user/hive/warehouse/hzyaoqin.db/src2/.hive-staging_hive_2017-03-20_22-43-44_189_8479160175818973314-1":hive:hdfs:drwxr-xr-x
    ```
    
    Which means each `w` required hdfs operation has to be doAsRealUser. In 
that case, proxy-users may could visit other proxy ones data. Do you meet that 
error while using intert/ctas?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to