[GitHub] [incubator-dolphinscheduler] gary0416 commented on issue #908: #864 Hive datasource support set role

[GitBox <gi...@apache.org>]

gary0416 commented on issue #908: #864 Hive datasource support set role
URL: https://github.com/apache/incubator-dolphinscheduler/pull/908#issuecomment-538761063
 
 
   Doc:  
   - https://cwiki.apache.org/confluence/display/Hive/SQL+Standard+Based+Hive+Authorization
   
   Key points:
   > Privileges to add or drop functions and macros are restricted to the admin role
   
   > However, a user who belongs to the admin role needs to run the "set role" command before getting the privileges of the admin role, as this role is not in current roles by default.
   
   Possible errors if not run the "set role" command:
   ```
   Error: Error while processing statement: Permission denied: Principal [name=xxx, type=USER] does not have following privileges for operation ADD [[ADMIN PRIVILEGE] on Object [type=COMMAND_PARAMS, name=[jar, hdfs:///xxx.jar]]] (state=,code=1)
   ```
   
   There may be a better way to using Hive(without Ranger) or on DolphinScheduler instead of this. 

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services