You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@kudu.apache.org by "Todd Lipcon (JIRA)" <ji...@apache.org> on 2018/01/29 19:36:00 UTC
[jira] [Commented] (KUDU-2272) AuthorizationException: User
'username' does not have privileges to access: server1
[ https://issues.apache.org/jira/browse/KUDU-2272?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16343875#comment-16343875 ]
Todd Lipcon commented on KUDU-2272:
-----------------------------------
This sounds like it should be an Impala JIRA rather than a Kudu one. Kudu doesn't yet have any direct integration with Sentry -- Impala's the component performing access checks here. Mind filing on the Impala JIRA?
> AuthorizationException: User 'username' does not have privileges to access: server1
> -----------------------------------------------------------------------------------
>
> Key: KUDU-2272
> URL: https://issues.apache.org/jira/browse/KUDU-2272
> Project: Kudu
> Issue Type: Bug
> Components: security
> Affects Versions: 1.5.0
> Environment: kudu 1.5.0-cdh5.13.1
> Reporter: Tomas Farkas
> Priority: Major
>
> In a Sentry enabled Kerberized environment user cannot create a Kudu table from a SELECT statement if it has a function, even though it has an ALL privilege on work database.
>
> {quote}create table work.tfsource ( i bigint , s string );
> insert into work.tfsource select 1, 'Test row';
> create table work.tfdest primary key ( i ) partition by hash ( i ) partitions 5 stored as kudu as
> select `i`, `s`, {color:#205081}current_timestamp(){color} as ins_date from `work`.`tfsource` limit 5;
> {quote}
> {color:#FF0000}AuthorizationException: User '****' does not have privileges to access: server1{color}
> {quote}create table work.tfsource ( i bigint , s string );
> insert into work.tfsource select 1, 'Test row';
> create table work.tfdest primary key ( i ) partition by hash ( i ) partitions 5 stored as kudu as
> select `i`, `s`, 0 as ins_date from `work`.`tfsource` limit 5;
> {quote}
> {color:#14892c}Inserted 1 row(s){color}
> {color:#14892c} {color}
> *It seems that if in the select statement is any function (tested now(), day("2018-02-16"0) then it requires server level ALL priviliges.*
> *{{Kudu version:}}*
> {{kudu 1.5.0-cdh5.13.1 revision 9044f1f377a6f2044d800600e5c2dc5e989c4dd4 build type RELEASE built by jenkins at 09 Nov 2017 08:50:42 PST on impala-ec2-pkg-centos-7-0c27.vpc.cloudera.com build id 2017-11-09_08-09-26}}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)