[jira] [Created] (IMPALA-5355) Sentry Privileges and roles updated in the wrong order on impala restart

["Anuj Phadke (JIRA)" <ji...@apache.org>]

Anuj Phadke created IMPALA-5355:
-----------------------------------

             Summary: Sentry Privileges and roles  updated in the wrong order on impala restart
                 Key: IMPALA-5355
                 URL: https://issues.apache.org/jira/browse/IMPALA-5355
             Project: IMPALA
          Issue Type: Bug
          Components: Catalog
            Reporter: Anuj Phadke


1) Login as 'hive' (cdep_global_admin), and run below query to update this role:
>grant role cdep_global_admin to group abc;

2. 2) now restart any Impala daemons (but do not restart Catalog), still login as 'hive', we got authorization errors:
[anuj.gce.cloudera.com:21000] > show tables;
Query: show tables
ERROR: AuthorizationException: User 'hive@GCE.CLOUDERA.COM' does not have privileges to access: default.

This error gets printed when role is null.
https://github.com/apache/incubator-impala/blob/master/fe/src/main/java/org/apache/impala/catalog/ImpaladCatalog.java#L271

https://github.com/apache/incubator-impala/blob/master/fe/src/main/java/org/apache/impala/catalog/AuthorizationPolicy.java#L123




--
This message was sent by Atlassian JIRA
(v6.3.15#6346)