You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "Simhadri Govindappa (Jira)" <ji...@apache.org> on 2022/11/20 03:01:00 UTC

[jira] [Assigned] (HIVE-26765) Hive Ranger URL policy for insert overwrite directory denies access when fully qualified paths are passed

     [ https://issues.apache.org/jira/browse/HIVE-26765?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Simhadri Govindappa reassigned HIVE-26765:
------------------------------------------


> Hive Ranger URL policy  for insert overwrite directory denies access when  fully qualified paths are passed 
> ------------------------------------------------------------------------------------------------------------
>
>                 Key: HIVE-26765
>                 URL: https://issues.apache.org/jira/browse/HIVE-26765
>             Project: Hive
>          Issue Type: Bug
>            Reporter: Simhadri Govindappa
>            Assignee: Simhadri Govindappa
>            Priority: Major
>
> Started seeing this issue after HIVE-25570 was merged.
>  
> {noformat}
> 0: jdbc:hive2://sim-hive-1.sim-hive.root.hwx.> INSERT OVERWRITE DIRECTORY '/user/hive/ozloasvr/output' SELECT table1.name, SUM(price) FROM table1 FULL OUTER JOIN table2 ON (table1.id = table2.id) GROUP BY table1.name;
> Error: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [livy] does not have [ALL] privilege on [hdfs://sim-hive-1.sim-hive.root.hwx.site:8020/user/hive/ozloasvr/output] (state=42000,code=40000){noformat}
> This needs to be fixed  in ranger , until then we should provide an option to switch between hive passing fully qualified or relative url for ranger for auth.
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)