You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@impala.apache.org by "liangwei wei (Jira)" <ji...@apache.org> on 2019/10/08 07:55:00 UTC

[jira] [Created] (IMPALA-9024) AuthorizationException: User 'user_xql' does not have privileges to execute 'CREATE' on: default even if set all privileges

liangwei wei created IMPALA-9024:
------------------------------------

             Summary: AuthorizationException: User 'user_xql' does not have privileges to execute 'CREATE' on: default  even if set all privileges 
                 Key: IMPALA-9024
                 URL: https://issues.apache.org/jira/browse/IMPALA-9024
             Project: IMPALA
          Issue Type: Improvement
          Components: Frontend
    Affects Versions: Impala 3.2.0
            Reporter: liangwei wei


I integrated impala and sentry of cdh6.3.0 in hue and gave impala server level "all"  permissions, but I found that any Submission on hue showed no permission to execute. After debug, it was found that sentry would call bitFieldActionFactory. getActionByName (policy Value) to find "all" action, but Action "all" in Privilege class  was defined as *, so resulted in null return and failed privilege validation.

so I think change the code in Privilege.java like this can solve problem

{code:java}
 ALL("all",
        SELECT.getCode() |
        INSERT.getCode() |
        ALTER.getCode() |
        CREATE.getCode() |
        DROP.getCode() |
        REFRESH.getCode())
{code}




--
This message was sent by Atlassian Jira
(v8.3.4#803005)