You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Yan (JIRA)" <ji...@apache.org> on 2016/11/07 21:41:59 UTC
[jira] [Created] (RANGER-1210) Ranger Hive Plugin does not throw an
exception when an INSERT/DELETE grant is issued from beeline
Yan created RANGER-1210:
---------------------------
Summary: Ranger Hive Plugin does not throw an exception when an INSERT/DELETE grant is issued from beeline
Key: RANGER-1210
URL: https://issues.apache.org/jira/browse/RANGER-1210
Project: Ranger
Issue Type: Bug
Components: plugins
Affects Versions: 0.6.1
Reporter: Yan
Priority: Minor
beeline>grant insert on test10 to user userx;
returns OK. But actually the hive log has a warning entry:
grant/revoke: unexpected privilege type 'DELETE'. Ignored
The policy is actually created but with no policy items. While the "UPDATE" grant properly sets up the policy item.
According to https://cwiki.apache.org/confluence/display/RANGER/Hive+Commands+to+Ranger+Permission+Mapping
Both INSERT and DELETE should be mapped to UPDATE.
What user experiences is that the grant of INSERT/DELETE has no effect at all even the return status is good.
So we should either throw an exception, or map the INSERT/DELETE to UPDATE in the "createGrantRevokeData" method of the "RangerHiveAuthorizer" class.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)