[ https://issues.apache.org/jira/browse/IMPALA-6451?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Fredy Wijaya resolved IMPALA-6451. ---------------------------------- Resolution: Fixed Fix Version/s: Impala 2.12.0 Impala 3.0 > Creating a Kudu table with CTAS fails with AuthorizationException: User > 'username' does not have privileges to access: server1 > ------------------------------------------------------------------------------------------------------------------------------ > > Key: IMPALA-6451 > URL: https://issues.apache.org/jira/browse/IMPALA-6451 > Project: IMPALA > Issue Type: Bug > Components: Frontend, Security > Affects Versions: Impala 2.8.0, Impala 2.9.0, Impala 2.10.0, Impala 2.11.0 > Reporter: Tomas Farkas > Assignee: Fredy Wijaya > Priority: Critical > Labels: security, usability > Fix For: Impala 3.0, Impala 2.12.0 > > > In a Sentry enabled Kerberized environment user cannot create a Kudu table > from a SELECT statement if it has a function, even though it has an ALL > privilege on work database. > > {quote}create table work.tfsource ( i bigint , s string ); > insert into work.tfsource select 1, 'Test row'; > create table work.tfdest primary key ( i ) partition by hash ( i ) partitions > 5 stored as kudu as > select `i`, `s`, {color:#205081}current_timestamp(){color} as ins_date from > `work`.`tfsource` limit 5; > {quote} > {color:#ff0000}AuthorizationException: User '****' does not have privileges > to access: server1{color} > {quote}create table work.tfsource ( i bigint , s string ); > insert into work.tfsource select 1, 'Test row'; > create table work.tfdest primary key ( i ) partition by hash ( i ) partitions > 5 stored as kudu as > select `i`, `s`, 0 as ins_date from `work`.`tfsource` limit 5; > {quote} > {color:#14892c}Inserted 1 row(s){color} > {color:#14892c} {color} > *It seems that if in the select statement is any function (tested now(), > day("2018-02-16"0) then it requires server level ALL priviliges.* > *{{Kudu version:}}* > {{kudu 1.5.0-cdh5.13.1 revision 9044f1f377a6f2044d800600e5c2dc5e989c4dd4 > build type RELEASE built by jenkins at 09 Nov 2017 08:50:42 PST on > impala-ec2-pkg-centos-7-0c27.vpc.cloudera.com build id 2017-11-09_08-09-26}} -- This message was sent by Atlassian JIRA (v7.6.3#76005)