[jira] [Commented] (RANGER-1669) We need to support the original functionality of hive：show grant user username
[ https://issues.apache.org/jira/browse/RANGER-1669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16795597#comment-16795597 ] Qiang Zhang commented on RANGER-1669: - Hi [~pengbo], Hive "show grants" when Ranger is authorizer should show permission details from Ranger. [RANGER-2367|https://issues.apache.org/jira/browse/RANGER-2367] will fix this issue > We need to support the original functionality of hive：show grant user username > -- > > Key: RANGER-1669 > URL: https://issues.apache.org/jira/browse/RANGER-1669 > Project: Ranger > Issue Type: New Feature > Components: plugins >Affects Versions: 1.0.0 >Reporter: peng.jianhua >Assignee: peng.jianhua >Priority: Critical > Fix For: 1.0.0 > > Attachments: > 0001-RANGER-1669-We-need-to-support-the-original-function.patch, > show-grant-error.png, show-grant-user-sucess.png > > > We need to support the original functionality of hive, > 1.Scene: the original hive supports sql:show grant user glc; > 2.Error：0: jdbc:hive2://10.43.182.241:1> show grant user glc; > Error: Error while processing statement: FAILED: Execution Error, return code > 1 from org.apache.hadoop.hive.ql.exec.DDLTask. showPrivileges() not > implemented in Ranger HiveAuthorizer (state=08S01,code=1) > 3.Solution：When you integrate the Ranger plug-in into hive, you can't execute > show grant user glc； > Modify RangerHiveAuthorizerBase.java to achieve the specific implementation > of showPrivileges, > 4.The modified results can continue to support the original functionality of > the hive. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (RANGER-1669) We need to support the original functionality of hive：show grant user username
[ https://issues.apache.org/jira/browse/RANGER-1669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16775838#comment-16775838 ] peng bo commented on RANGER-1669: - Hello [~peng.jianhua][~thejas] , Why the command "show grant user username" doesn't return the correspond RANGER privilege but hive original result instead? Your reply would be appreciated. Tks. > We need to support the original functionality of hive：show grant user username > -- > > Key: RANGER-1669 > URL: https://issues.apache.org/jira/browse/RANGER-1669 > Project: Ranger > Issue Type: New Feature > Components: plugins >Affects Versions: 1.0.0 >Reporter: peng.jianhua >Assignee: peng.jianhua >Priority: Critical > Fix For: 1.0.0 > > Attachments: > 0001-RANGER-1669-We-need-to-support-the-original-function.patch, > show-grant-error.png, show-grant-user-sucess.png > > > We need to support the original functionality of hive, > 1.Scene: the original hive supports sql:show grant user glc; > 2.Error：0: jdbc:hive2://10.43.182.241:1> show grant user glc; > Error: Error while processing statement: FAILED: Execution Error, return code > 1 from org.apache.hadoop.hive.ql.exec.DDLTask. showPrivileges() not > implemented in Ranger HiveAuthorizer (state=08S01,code=1) > 3.Solution：When you integrate the Ranger plug-in into hive, you can't execute > show grant user glc； > Modify RangerHiveAuthorizerBase.java to achieve the specific implementation > of showPrivileges, > 4.The modified results can continue to support the original functionality of > the hive. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (RANGER-1669) We need to support the original functionality of hive：show grant user username
[ https://issues.apache.org/jira/browse/RANGER-1669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16098121#comment-16098121 ] peng.jianhua commented on RANGER-1669: -- Hi [~thejas], I had updated the patch according to your advise. Is there any problem with this latest implementation? For the updated patch, If there is a problem, please tell me. Thanks a lot. Hi [~rmani], Do you have any further suggestions for the updated patch? > We need to support the original functionality of hive：show grant user username > -- > > Key: RANGER-1669 > URL: https://issues.apache.org/jira/browse/RANGER-1669 > Project: Ranger > Issue Type: New Feature > Components: plugins >Affects Versions: 1.0.0 >Reporter: peng.jianhua >Assignee: peng.jianhua >Priority: Critical > Fix For: master > > Attachments: > 0001-RANGER-1669-We-need-to-support-the-original-function.patch, > show-grant-error.png, show-grant-user-sucess.png > > > We need to support the original functionality of hive, > 1.Scene: the original hive supports sql:show grant user glc; > 2.Error：0: jdbc:hive2://10.43.182.241:1> show grant user glc; > Error: Error while processing statement: FAILED: Execution Error, return code > 1 from org.apache.hadoop.hive.ql.exec.DDLTask. showPrivileges() not > implemented in Ranger HiveAuthorizer (state=08S01,code=1) > 3.Solution：When you integrate the Ranger plug-in into hive, you can't execute > show grant user glc； > Modify RangerHiveAuthorizerBase.java to achieve the specific implementation > of showPrivileges, > 4.The modified results can continue to support the original functionality of > the hive. -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (RANGER-1669) We need to support the original functionality of hive：show grant user username
[ https://issues.apache.org/jira/browse/RANGER-1669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16065839#comment-16065839 ] peng.jianhua commented on RANGER-1669: -- Ok. I will continue to look for more reasonable way to fix the issue. And please continue to make more reasonable advice after I submitted the patch. Thanks a lot. > We need to support the original functionality of hive：show grant user username > -- > > Key: RANGER-1669 > URL: https://issues.apache.org/jira/browse/RANGER-1669 > Project: Ranger > Issue Type: New Feature > Components: plugins >Affects Versions: 1.0.0 >Reporter: peng.jianhua >Assignee: peng.jianhua >Priority: Critical > Fix For: master > > Attachments: > 0001-RANGER-1669-We-need-to-support-the-original-function.patch, > show-grant-error.png, show-grant-user-sucess.png > > > We need to support the original functionality of hive, > 1.Scene: the original hive supports sql:show grant user glc; > 2.Error：0: jdbc:hive2://10.43.182.241:1> show grant user glc; > Error: Error while processing statement: FAILED: Execution Error, return code > 1 from org.apache.hadoop.hive.ql.exec.DDLTask. showPrivileges() not > implemented in Ranger HiveAuthorizer (state=08S01,code=1) > 3.Solution：When you integrate the Ranger plug-in into hive, you can't execute > show grant user glc； > Modify RangerHiveAuthorizerBase.java to achieve the specific implementation > of showPrivileges, > 4.The modified results can continue to support the original functionality of > the hive. -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (RANGER-1669) We need to support the original functionality of hive：show grant user username
[ https://issues.apache.org/jira/browse/RANGER-1669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16065829#comment-16065829 ] Qiang Zhang commented on RANGER-1669: - Hi [~rmani], Could we use other more reasonable ways to solve this problem? [~thejas]'s point of view is justified. The reason is as following: 1. Execute the 'show grant user' succefully in hive when user doesn't use ranger hive plugin. 2. Execute the 'show grant user' fail in hive when user uses ranger hive plugin. The conclusion is that command can not use after used hive plugin of ranger. All application programs using this command execute fail after used hive plugin of ranger. This issue affected the user's functions which are ok if user doesn't use our hive plugin. > We need to support the original functionality of hive：show grant user username > -- > > Key: RANGER-1669 > URL: https://issues.apache.org/jira/browse/RANGER-1669 > Project: Ranger > Issue Type: New Feature > Components: plugins >Affects Versions: 1.0.0 >Reporter: peng.jianhua >Assignee: peng.jianhua >Priority: Critical > Fix For: master > > Attachments: > 0001-RANGER-1669-We-need-to-support-the-original-function.patch, > show-grant-error.png, show-grant-user-sucess.png > > > We need to support the original functionality of hive, > 1.Scene: the original hive supports sql:show grant user glc; > 2.Error：0: jdbc:hive2://10.43.182.241:1> show grant user glc; > Error: Error while processing statement: FAILED: Execution Error, return code > 1 from org.apache.hadoop.hive.ql.exec.DDLTask. showPrivileges() not > implemented in Ranger HiveAuthorizer (state=08S01,code=1) > 3.Solution：When you integrate the Ranger plug-in into hive, you can't execute > show grant user glc； > Modify RangerHiveAuthorizerBase.java to achieve the specific implementation > of showPrivileges, > 4.The modified results can continue to support the original functionality of > the hive. -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (RANGER-1669) We need to support the original functionality of hive：show grant user username
[ https://issues.apache.org/jira/browse/RANGER-1669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16065460#comment-16065460 ] Thejas M Nair commented on RANGER-1669: --- Well, the API could be implemented for Ranger, it is just that that using SqlStdHiveAccessControler is not the right way to implement it. > We need to support the original functionality of hive：show grant user username > -- > > Key: RANGER-1669 > URL: https://issues.apache.org/jira/browse/RANGER-1669 > Project: Ranger > Issue Type: New Feature > Components: plugins >Affects Versions: 1.0.0 >Reporter: peng.jianhua >Assignee: peng.jianhua >Priority: Critical > Fix For: master > > Attachments: > 0001-RANGER-1669-We-need-to-support-the-original-function.patch, > show-grant-error.png, show-grant-user-sucess.png > > > We need to support the original functionality of hive, > 1.Scene: the original hive supports sql:show grant user glc; > 2.Error：0: jdbc:hive2://10.43.182.241:1> show grant user glc; > Error: Error while processing statement: FAILED: Execution Error, return code > 1 from org.apache.hadoop.hive.ql.exec.DDLTask. showPrivileges() not > implemented in Ranger HiveAuthorizer (state=08S01,code=1) > 3.Solution：When you integrate the Ranger plug-in into hive, you can't execute > show grant user glc； > Modify RangerHiveAuthorizerBase.java to achieve the specific implementation > of showPrivileges, > 4.The modified results can continue to support the original functionality of > the hive. -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (RANGER-1669) We need to support the original functionality of hive：show grant user username
[ https://issues.apache.org/jira/browse/RANGER-1669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16065334#comment-16065334 ] Thejas M Nair commented on RANGER-1669: --- Falling back to SQLStdHiveAccessControler won't give the right results for show grants. Ranger permissions are different from SQLStdHiveAccessControler (which is used for 'sql standard authorization' (Why I am I not able to add only 'internal comment's ? ) > We need to support the original functionality of hive：show grant user username > -- > > Key: RANGER-1669 > URL: https://issues.apache.org/jira/browse/RANGER-1669 > Project: Ranger > Issue Type: New Feature > Components: plugins >Affects Versions: 1.0.0 >Reporter: peng.jianhua >Assignee: peng.jianhua >Priority: Critical > Fix For: master > > Attachments: > 0001-RANGER-1669-We-need-to-support-the-original-function.patch, > show-grant-error.png, show-grant-user-sucess.png > > > We need to support the original functionality of hive, > 1.Scene: the original hive supports sql:show grant user glc; > 2.Error：0: jdbc:hive2://10.43.182.241:1> show grant user glc; > Error: Error while processing statement: FAILED: Execution Error, return code > 1 from org.apache.hadoop.hive.ql.exec.DDLTask. showPrivileges() not > implemented in Ranger HiveAuthorizer (state=08S01,code=1) > 3.Solution：When you integrate the Ranger plug-in into hive, you can't execute > show grant user glc； > Modify RangerHiveAuthorizerBase.java to achieve the specific implementation > of showPrivileges, > 4.The modified results can continue to support the original functionality of > the hive. -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (RANGER-1669) We need to support the original functionality of hive：show grant user username
[ https://issues.apache.org/jira/browse/RANGER-1669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16065197#comment-16065197 ] Ramesh Mani commented on RANGER-1669: - Falling back to Native SQLStdHiveAccessControler is not an ideal way to resolve this. HiveAuthorizer should provide the necessary implementation for showPrivileges(). This has to be discussed with Hive committers also. [~thejas][~madhan.neethiraj] > We need to support the original functionality of hive：show grant user username > -- > > Key: RANGER-1669 > URL: https://issues.apache.org/jira/browse/RANGER-1669 > Project: Ranger > Issue Type: New Feature > Components: plugins >Affects Versions: 1.0.0 >Reporter: peng.jianhua >Assignee: peng.jianhua >Priority: Critical > Fix For: master > > Attachments: > 0001-RANGER-1669-We-need-to-support-the-original-function.patch, > show-grant-error.png, show-grant-user-sucess.png > > > We need to support the original functionality of hive, > 1.Scene: the original hive supports sql:show grant user glc; > 2.Error：0: jdbc:hive2://10.43.182.241:1> show grant user glc; > Error: Error while processing statement: FAILED: Execution Error, return code > 1 from org.apache.hadoop.hive.ql.exec.DDLTask. showPrivileges() not > implemented in Ranger HiveAuthorizer (state=08S01,code=1) > 3.Solution：When you integrate the Ranger plug-in into hive, you can't execute > show grant user glc； > Modify RangerHiveAuthorizerBase.java to achieve the specific implementation > of showPrivileges, > 4.The modified results can continue to support the original functionality of > the hive. -- This message was sent by Atlassian JIRA (v6.4.14#64029)
