Naveen, you need to add URL policy in Hive Service (in Ranger).
Bosco From: Ramesh Mani <rm...@hortonworks.com> Reply-To: <user@ranger.apache.org> Date: Tuesday, March 19, 2019 at 3:52 PM To: "user@ranger.apache.org" <user@ranger.apache.org> Subject: Re: Ranger hive create external table error Naveen, Which version of ranger you are using? Thanks, Ramesh From: Naveen M <navav1...@gmail.com> Reply-To: "user@ranger.apache.org" <user@ranger.apache.org> Date: Tuesday, March 19, 2019 at 4:15 AM To: "user@ranger.apache.org" <user@ranger.apache.org> Subject: Fwd: Ranger hive create external table error Can anyone please look into this? ---------- Forwarded message --------- From: Naveen M <navav1...@gmail.com> Date: Tue, Mar 5, 2019 at 15:59 Subject: Ranger hive create external table error To: user@ranger.apache.org <user@ranger.apache.org> Hi, I am getting the below error when creating an external table on Hive with S3 location. I created a Ranger policy (URL Type) to enable “READ” access to the S3 location. Is there anything else missing here in terms of Ranger policy provisioning? Please let me know. My requirement looks similar to https://issues.apache.org/jira/browse/RANGER-1513 1. 2. Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [USER1] does not have [READ] privilege on [s3://LOCATION]: org.apache.hive.service.cli.HiveSQLException 3. org.apache.hive.service.cli.HiveSQLException: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [USER1] does not have [READ] privilege on [s3://LOCATION] 4. at org.apache.hive.jdbc.Utils.verifySuccess(Utils.java:267) 5. at org.apache.hive.jdbc.Utils.verifySuccessWithInfo(Utils.java:253) 6. at org.apache.hive.jdbc.HiveStatement.runAsyncOnServer(HiveStatement.java:313) 7. at org.apache.hive.jdbc.HiveStatement.execute
