You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@kudu.apache.org by "Todd Lipcon (JIRA)" <ji...@apache.org> on 2018/01/29 19:36:00 UTC

[jira] [Resolved] (KUDU-2272) AuthorizationException: User 'username' does not have privileges to access: server1

     [ https://issues.apache.org/jira/browse/KUDU-2272?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Todd Lipcon resolved KUDU-2272.
-------------------------------
       Resolution: Invalid
    Fix Version/s: n/a

> AuthorizationException: User 'username' does not have privileges to access: server1
> -----------------------------------------------------------------------------------
>
>                 Key: KUDU-2272
>                 URL: https://issues.apache.org/jira/browse/KUDU-2272
>             Project: Kudu
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 1.5.0
>         Environment: kudu 1.5.0-cdh5.13.1
>            Reporter: Tomas Farkas
>            Priority: Major
>             Fix For: n/a
>
>
> In a Sentry enabled Kerberized environment user cannot create a Kudu table from a SELECT statement if it has a function, even though it has an ALL privilege on work database.
>  
> {quote}create table work.tfsource ( i bigint , s string );
> insert into work.tfsource select 1, 'Test row';
> create table work.tfdest primary key ( i ) partition by hash ( i ) partitions 5 stored as kudu as 
> select `i`, `s`, {color:#205081}current_timestamp(){color} as ins_date from `work`.`tfsource` limit 5;
> {quote}
> {color:#FF0000}AuthorizationException: User '****' does not have privileges to access: server1{color}
> {quote}create table work.tfsource ( i bigint , s string );
> insert into work.tfsource select 1, 'Test row';
> create table work.tfdest primary key ( i ) partition by hash ( i ) partitions 5 stored as kudu as 
> select `i`, `s`, 0 as ins_date from `work`.`tfsource` limit 5;
> {quote}
> {color:#14892c}Inserted 1 row(s){color}
> {color:#14892c} {color}
> *It seems that if in the select statement is any function (tested now(), day("2018-02-16"0) then it requires server level ALL priviliges.*
> *{{Kudu version:}}*
> {{kudu 1.5.0-cdh5.13.1 revision 9044f1f377a6f2044d800600e5c2dc5e989c4dd4 build type RELEASE built by jenkins at 09 Nov 2017 08:50:42 PST on impala-ec2-pkg-centos-7-0c27.vpc.cloudera.com build id 2017-11-09_08-09-26}}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)