For terminology: it's important to realize that Permissions are distinct
from Authorizations.
Permissions control granular operations on Accumulo and Accumulo Tables,
e.g. read, write, alter, etc.
Authorizations control the actual data you can see within a table (note,
this implies that you have the read permission already). This is the
"cell level visibility" aspect of the system.
[email protected] wrote:
It’s likely that you created a table, inserted data with column
visibilities, but never gave the user the authorization tokens to see
the data. Try setting the authorization tokens for the user with the
setauths command. Since you are using the ‘root’ user, it would be
something like: setauths –u root –s token1,token2,…
*From:*sateesh kumar [mailto:[email protected]]
*Sent:* Sunday, September 13, 2015 10:33 AM
*To:* [email protected]
*Subject:* Error BAD_AUTHORIZATIONS for user root
Hi All,
I have created few tables in Accumulo as a User "root" and when i tried
to get the data from those tables i am getting the following Error:
[ERROR]
java.lang.RuntimeException:
org.apache.accumulo.core.client.AccumuloSecurityException: Error
BAD_AUTHORIZATIONS for user root on table entities_v(ID:8) - The user
does not have the specified authorizations
at
org.apache.accumulo.core.client.impl.ScannerIterator.hasNext(ScannerIterator.java:187)
at
org.apache.accumulo.core.util.PeekingIterator.<init>(PeekingIterator.java:29)
at org.apache.accumulo.core.client.RowIterator.<init>(RowIterator.java:110)
at
org.securegraph.accumulo.AccumuloGraph$6.createIterator(AccumuloGraph.java:906)
at
org.securegraph.util.LookAheadIterable.iterator(LookAheadIterable.java:10)
at org.securegraph.accumulo.AccumuloGraph.getVertex(AccumuloGraph.java:811)
at org.securegraph.GraphBase.getVertex(GraphBase.java:67)
[/ERROR]
When i log on to accumulo CLI and check for permissions for the user
root@localhost> userpermissions
System permissions: System.GRANT, System.CREATE_TABLE,
System.DROP_TABLE, System.ALTER_TABLE, System.CREATE_USER,
System.DROP_USER, System.ALTER_USER, System.SYSTEM,
System.CREATE_NAMESPACE, System.DROP_NAMESPACE, System.ALTER_NAMESPACE
Namespace permissions (accumulo): Namespace.READ, Namespace.ALTER_TABLE
Table permissions (accumulo.metadata): Table.READ, Table.ALTER_TABLE
Table permissions (accumulo.root): Table.READ, Table.ALTER_TABLE
Table permissions (my_table): Table.READ, Table.WRITE,
Table.BULK_IMPORT, Table.ALTER_TABLE, Table.GRANT, Table.DROP_TABLE
I see the permissions for my_table.
Not sure why i am getting an Exception when i tried to retrieve the data.
Thanks
