You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@impala.apache.org by "liangwei wei (Jira)" <ji...@apache.org> on 2019/10/08 07:55:00 UTC
[jira] [Created] (IMPALA-9024) AuthorizationException: User
'user_xql' does not have privileges to execute 'CREATE' on: default even
if set all privileges
liangwei wei created IMPALA-9024:
------------------------------------
Summary: AuthorizationException: User 'user_xql' does not have privileges to execute 'CREATE' on: default even if set all privileges
Key: IMPALA-9024
URL: https://issues.apache.org/jira/browse/IMPALA-9024
Project: IMPALA
Issue Type: Improvement
Components: Frontend
Affects Versions: Impala 3.2.0
Reporter: liangwei wei
I integrated impala and sentry of cdh6.3.0 in hue and gave impala server level "all" permissions, but I found that any Submission on hue showed no permission to execute. After debug, it was found that sentry would call bitFieldActionFactory. getActionByName (policy Value) to find "all" action, but Action "all" in Privilege class was defined as *, so resulted in null return and failed privilege validation.
so I think change the code in Privilege.java like this can solve problem
{code:java}
ALL("all",
SELECT.getCode() |
INSERT.getCode() |
ALTER.getCode() |
CREATE.getCode() |
DROP.getCode() |
REFRESH.getCode())
{code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)