You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hive.apache.org by "Laszlo Bodor (JIRA)" <ji...@apache.org> on 2018/07/04 14:03:00 UTC

[jira] [Created] (HIVE-20089) CTAS doesn't work into nonexisting /tmp/... directory while CT works

Laszlo Bodor created HIVE-20089:
-----------------------------------

             Summary: CTAS doesn't work into nonexisting /tmp/... directory while CT works
                 Key: HIVE-20089
                 URL: https://issues.apache.org/jira/browse/HIVE-20089
             Project: Hive
          Issue Type: Bug
    Affects Versions: 3.0.0
            Reporter: Laszlo Bodor


While checking negative qtests I've found some strange behavior according to CT and CTAS statements.

ct_noperm_loc.q
ctas_noperm_loc.q

The common part these tests are initialization:
{code}

set hive.test.authz.sstd.hs2.mode=true;

set hive.security.authorization.manager=org.apache.hadoop.hive.ql.security.authorization.plugin.sqlstd.SQLStdHiveAuthorizerFactoryForTest;

set hive.security.authenticator.manager=org.apache.hadoop.hive.ql.security.SessionStateConfigUserAuthenticator;

set hive.security.authorization.enabled=true;

set user.name=user1;
{code}

 

But while simple 'create table' works to a nonexisting dir...
{code}
create table foo0(id int) location 'hdfs:///tmp/ct_noperm_loc_foo0';
{code}

...'create table as select' doesn't work:
{code}
create table foo0 location 'hdfs:///tmp/ctas_noperm_loc_foo0' as select 1 as c1;
{code}

expected result is:
{code}
FAILED: HiveAccessControlException Permission denied: Principal [name=user1, type=USER] does not have following privileges for operation CREATETABLE_AS_SELECT [[INSERT, DELETE] on Object [type=DFS_URI, name=hdfs://### HDFS PATH ###]]
{code}

 

Is it by design, am I missing something here?

 

{code}
mvn test -Dtest=TestNegativeMinimrCliDriver -Dqfile=ct_noperm_loc.q -Pitests,hadoop-2 -pl itests/qtest
mvn test -Dtest=TestNegativeMinimrCliDriver -Dqfile=ctas_noperm_loc.q -Pitests,hadoop-2 -pl itests/qtest
{code}

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)