[jira] [Created] (RANGER-3845) trino query `CREATE TABLE ... AS ...` got access denied

["Yufan Ho (Jira)" <ji...@apache.org>]

Yufan Ho created RANGER-3845:
--------------------------------

             Summary: trino query `CREATE TABLE ... AS ...` got access denied
                 Key: RANGER-3845
                 URL: https://issues.apache.org/jira/browse/RANGER-3845
             Project: Ranger
          Issue Type: Bug
          Components: plugins
    Affects Versions: 2.3.0
            Reporter: Yufan Ho


Got permission denied when executing a `CREATE TABLE .. AS SELECT ..` statement.
But if it was split into two statements - `CREATE TABLE ..` and `INSERT INTO ..` - both statements will success.

logs
{code:java}
trino:tmp> create table test as select 1 as a;
Query 20220729_093308_02076_gznsx failed: Access Denied: Cannot create table hive.tmp.test

trino:tmp> create table test (a int);
CREATE TABLE
trino:tmp> insert into test select 1;
INSERT: 1 row
Query 20220729_093357_02089_gznsx, FINISHED, 16 nodes
Splits: 94 total, 94 done (100.00%)
0.61 [0 rows, 0B] [0 rows/s, 0B/s] 

{code}

Environment:

Ranger 2.3.0 admin-server
Trino 370 with ranger-2.3.0-trino-plugin installed
Granted all permissions to public group, including all 4 levels (catalog, schema, table, column)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)