You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Velmurugan Periasamy (JIRA)" <ji...@apache.org> on 2017/03/19 21:26:41 UTC

[jira] [Updated] (RANGER-1210) Ranger Hive Plugin does not throw an exception when an INSERT/DELETE grant is issued from beeline

     [ https://issues.apache.org/jira/browse/RANGER-1210?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Velmurugan Periasamy updated RANGER-1210:
-----------------------------------------
    Fix Version/s: 0.7.0

> Ranger Hive Plugin does not throw an exception when an INSERT/DELETE grant is issued from beeline
> -------------------------------------------------------------------------------------------------
>
>                 Key: RANGER-1210
>                 URL: https://issues.apache.org/jira/browse/RANGER-1210
>             Project: Ranger
>          Issue Type: Bug
>          Components: plugins
>    Affects Versions: 0.6.1
>            Reporter: Yan
>            Priority: Minor
>             Fix For: 0.7.0
>
>
> beeline>grant insert on test10 to user userx;
> returns OK. But actually the hive log has a warning entry:
> grant/revoke: unexpected privilege type 'DELETE'. Ignored
> The policy is actually created but with no policy items. While the "UPDATE" grant properly sets up the policy item.
> According to https://cwiki.apache.org/confluence/display/RANGER/Hive+Commands+to+Ranger+Permission+Mapping
> Both INSERT and DELETE should be mapped to UPDATE.
> What user experiences is that the grant of INSERT/DELETE has no effect at all even the return status is good.
> So we should either throw an exception, or map the INSERT/DELETE to UPDATE in the "createGrantRevokeData" method of the "RangerHiveAuthorizer" class.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)