[jira] [Created] (SENTRY-516) Improve auth failure error message when user has no privileges on a URI

["Lenni Kuff (JIRA)" <ji...@apache.org>]

Lenni Kuff created SENTRY-516:
---------------------------------

             Summary: Improve auth failure error message when user has no privileges on a URI
                 Key: SENTRY-516
                 URL: https://issues.apache.org/jira/browse/SENTRY-516
             Project: Sentry
          Issue Type: Bug
    Affects Versions: 1.5.0
            Reporter: Lenni Kuff


When a user does not have privileges on a URI, but does have all other privileges required to executed the operation, the error message message logged is a bit confusing:

{code}
Caused by: org.apache.hadoop.hive.ql.metadata.AuthorizationException: User <user> does not have privileges for CREATEFUNCTION
	at org.apache.sentry.binding.hive.authz.HiveAuthzBinding.authorize(HiveAuthzBinding.java:317)
{code}

Since the user does have privileges to execute the other parts of the DDL statement, it would be nice to clarify the failing part was due not having privileges on the URI.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)