You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "Hari Sekhon (JIRA)" <ji...@apache.org> on 2015/11/03 15:36:27 UTC

[jira] [Commented] (HIVE-12241) SQLStdAuth grant on .* not recognized

    [ https://issues.apache.org/jira/browse/HIVE-12241?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14987372#comment-14987372 ] 

Hari Sekhon commented on HIVE-12241:
------------------------------------

Agreed Ranger is nice but not everybody has Ranger, I have it on the other cluster but haven't deployed it to this one yet, and other distributions don't even have Ranger yet.

>From Hive's perspective this should be solvable using native SQL grants.

The whole point of SQLStdAuth was to be similar to grants in RDBMS and since they can do grant  on <db>.* then Hive should support this syntax also.

> SQLStdAuth grant on <db>.* not recognized
> -----------------------------------------
>
>                 Key: HIVE-12241
>                 URL: https://issues.apache.org/jira/browse/HIVE-12241
>             Project: Hive
>          Issue Type: Bug
>          Components: Parser, SQLStandardAuthorization
>    Affects Versions: 0.14.0
>         Environment: HDP 2.2
>            Reporter: Hari Sekhon
>
> Using SQLStdAuthorizer Hive doesn't recognize doing a grant on all tables like I've done before in RDBMS. If having a lot of tables this becomes very inconvenient to grant on a table-by-table basis and granting on database succeeds but still doesn't allow user to query tables in that database:
> {code}
> > grant all on myDB.* to user hari;
> Error: Error while compiling statement: FAILED: ParseException line 1:15 mismatched input '.' expecting TO near 'myDB' in grant privileges (state=42000,code=40000)
> > grant all on myDB.`*` to user hari;
> Error: Error while compiling statement: FAILED: SemanticException [Error 10001]: Table not found myDB.* (state=42S02,code=10001)
> > grant all on `myDB.*` to user hari;  
> Error: Error while compiling statement: FAILED: SemanticException [Error 10001]: Table not found myDB.* (state=42S02,code=10001)
> > grant all on all to user hari;   
> Error: Error while compiling statement: FAILED: SemanticException [Error 10001]: Table not found myDB.all (state=42S02,code=10001)
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)