You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hive.apache.org by "Laszlo Bodor (JIRA)" <ji...@apache.org> on 2018/07/04 14:03:00 UTC
[jira] [Created] (HIVE-20089) CTAS doesn't work into nonexisting
/tmp/... directory while CT works
Laszlo Bodor created HIVE-20089:
-----------------------------------
Summary: CTAS doesn't work into nonexisting /tmp/... directory while CT works
Key: HIVE-20089
URL: https://issues.apache.org/jira/browse/HIVE-20089
Project: Hive
Issue Type: Bug
Affects Versions: 3.0.0
Reporter: Laszlo Bodor
While checking negative qtests I've found some strange behavior according to CT and CTAS statements.
ct_noperm_loc.q
ctas_noperm_loc.q
The common part these tests are initialization:
{code}
set hive.test.authz.sstd.hs2.mode=true;
set hive.security.authorization.manager=org.apache.hadoop.hive.ql.security.authorization.plugin.sqlstd.SQLStdHiveAuthorizerFactoryForTest;
set hive.security.authenticator.manager=org.apache.hadoop.hive.ql.security.SessionStateConfigUserAuthenticator;
set hive.security.authorization.enabled=true;
set user.name=user1;
{code}
But while simple 'create table' works to a nonexisting dir...
{code}
create table foo0(id int) location 'hdfs:///tmp/ct_noperm_loc_foo0';
{code}
...'create table as select' doesn't work:
{code}
create table foo0 location 'hdfs:///tmp/ctas_noperm_loc_foo0' as select 1 as c1;
{code}
expected result is:
{code}
FAILED: HiveAccessControlException Permission denied: Principal [name=user1, type=USER] does not have following privileges for operation CREATETABLE_AS_SELECT [[INSERT, DELETE] on Object [type=DFS_URI, name=hdfs://### HDFS PATH ###]]
{code}
Is it by design, am I missing something here?
{code}
mvn test -Dtest=TestNegativeMinimrCliDriver -Dqfile=ct_noperm_loc.q -Pitests,hadoop-2 -pl itests/qtest
mvn test -Dtest=TestNegativeMinimrCliDriver -Dqfile=ctas_noperm_loc.q -Pitests,hadoop-2 -pl itests/qtest
{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)