You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@hive.apache.org by kumar r <ku...@gmail.com> on 2016/05/12 09:01:51 UTC

Hive SQL based authorization don't have support for group

Hi,

I have configured hive-1.2.1 with Hadoop-2.7.2. I have enabled SQL standard
based authorization.

I can give permission for user or roles. i cannot find any option for
groups.

Is there any feature available for group permission on Hive SQL standard
based authorization?

When i am trying to execute below command getting exception,

grant select on sample to group Testing;

*Exception*

Error: Error while processing statement: FAILED: Execution Error, return
code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. Invalid principal
type in principal Principal [name=Testing, type=GROUP] (state=08S01,code=1)

Stack overflow question:
http://stackoverflow.com/questions/37070419/hive-authorization-dont-have-support-for-group

Thanks,
Kumar

Re: Hive SQL based authorization don't have support for group

Posted by kumar r <ku...@gmail.com>.

Thanks for the information.

On Thu, May 12, 2016 at 10:39 PM, Alan Gates <al...@gmail.com> wrote:

> By group here I assume you mean posix style file group (from HDFS)?  No,
> there isn’t any connection right now.  We’d like to be able to pick up
> groups from HDFS and define those as roles in Hive, but we haven’t added
> that feature.
>
> You’ll need to define a role that includes the members of that group.
>
> Alan.
>
> > On May 12, 2016, at 02:01, kumar r <ku...@gmail.com> wrote:
> >
> > Hi,
> >
> > I have configured hive-1.2.1 with Hadoop-2.7.2. I have enabled SQL
> standard based authorization.
> >
> > I can give permission for user or roles. i cannot find any option for
> groups.
> >
> > Is there any feature available for group permission on Hive SQL standard
> based authorization?
> >
> > When i am trying to execute below command getting exception,
> >
> > grant select on sample to group Testing;
> >
> > Exception
> >
> > Error: Error while processing statement: FAILED: Execution Error, return
> > code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. Invalid principal
> > type in principal Principal [name=Testing, type=GROUP]
> (state=08S01,code=1)
> >
> > Stack overflow question:
> >
> http://stackoverflow.com/questions/37070419/hive-authorization-dont-have-support-for-group
> >
> > Thanks,
> > Kumar
> >
>
>

Re: Hive SQL based authorization don't have support for group

Posted by Alan Gates <al...@gmail.com>.

By group here I assume you mean posix style file group (from HDFS)?  No, there isn’t any connection right now.  We’d like to be able to pick up groups from HDFS and define those as roles in Hive, but we haven’t added that feature.

You’ll need to define a role that includes the members of that group.

Alan.

> On May 12, 2016, at 02:01, kumar r <ku...@gmail.com> wrote:
> 
> Hi,
> 
> I have configured hive-1.2.1 with Hadoop-2.7.2. I have enabled SQL standard based authorization.
> 
> I can give permission for user or roles. i cannot find any option for groups.
> 
> Is there any feature available for group permission on Hive SQL standard based authorization?
> 
> When i am trying to execute below command getting exception,
> 
> grant select on sample to group Testing;
> 
> Exception
> 
> Error: Error while processing statement: FAILED: Execution Error, return 
> code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. Invalid principal     
> type in principal Principal [name=Testing, type=GROUP] (state=08S01,code=1)
> 
> Stack overflow question: 
> http://stackoverflow.com/questions/37070419/hive-authorization-dont-have-support-for-group
> 
> Thanks,
> Kumar
>