You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sentry.apache.org by "Colin Ma (JIRA)" <ji...@apache.org> on 2015/08/26 05:14:45 UTC

[jira] [Commented] (SENTRY-739) when user doesn't have admin privileges, show grant throw exception, better improve error message

    [ https://issues.apache.org/jira/browse/SENTRY-739?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14712414#comment-14712414 ] 

Colin Ma commented on SENTRY-739:
---------------------------------

[~anneyu], the detail of the exception is removed from the error message, and the following is the example of the error message:
{code}
Error processing Sentry command: Access denied to systest. Please grant admin privilege to systest.
{code} 

> when user doesn't have admin privileges, show grant throw exception, better improve error message
> -------------------------------------------------------------------------------------------------
>
>                 Key: SENTRY-739
>                 URL: https://issues.apache.org/jira/browse/SENTRY-739
>             Project: Sentry
>          Issue Type: Bug
>          Components: Hive Plugin
>    Affects Versions: 1.4.0
>            Reporter: Anne Yu
>            Assignee: Colin Ma
>         Attachments: SENTRY-739.001.patch
>
>
> Better to improve the below error message to instruct user to grant admin privilege.
> {code}
> 0: jdbc:hive2://a2110.halxg.cloudera.com:1000> SHOW GRANT ROLE lktfddwe_role_7 ON TABLE lktfddwe_db_1.tab_4;
> ERROR : Error processing Sentry command: Access denied to systest. Server Stacktrace: org.apache.sentry.provider.db.SentryAccessDeniedException: Access denied to systest
> 	at org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessor.list_sentry_privileges_by_role(SentryPolicyStoreProcessor.java:491)
> 	at org.apache.sentry.provider.db.service.thrift.SentryPolicyService$Processor$list_sentry_privileges_by_role.getResult(SentryPolicyService.java:973)
> 	at org.apache.sentry.provider.db.service.thrift.SentryPolicyService$Processor$list_sentry_privileges_by_role.getResult(SentryPolicyService.java:958)
> 	at sentry.org.apache.thrift.ProcessFunction.process(ProcessFunction.java:39)
> 	at sentry.org.apache.thrift.TBaseProcessor.process(TBaseProcessor.java:39)
> 	at org.apache.sentry.provider.db.service.thrift.SentryProcessorWrapper.process(SentryProcessorWrapper.java:48)
> 	at sentry.org.apache.thrift.TMultiplexedProcessor.process(TMultiplexedProcessor.java:123)
> 	at sentry.org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:285)
> 	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
> 	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
> 	at java.lang.Thread.run(Thread.java:745)
> Error: Error while processing statement: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: Access denied to systest (state=08S01,code=1)
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)