You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "Vladimir Tselm (JIRA)" <ji...@apache.org> on 2017/02/15 15:25:41 UTC

[jira] [Assigned] (HIVE-15890) hive permission problem

     [ https://issues.apache.org/jira/browse/HIVE-15890?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vladimir Tselm reassigned HIVE-15890:
-------------------------------------

    Assignee: Hive QA

> hive permission problem
> -----------------------
>
>                 Key: HIVE-15890
>                 URL: https://issues.apache.org/jira/browse/HIVE-15890
>             Project: Hive
>          Issue Type: Bug
>          Components: HiveServer2
>    Affects Versions: 2.1.1
>            Reporter: Vladimir Tselm
>            Assignee: Hive QA
>
> Hello
> While trying to config hive with ldap authorization, I found a strange issue.
> I created users hadoop and hadoop_ro. Second one is absent DROP TABLE privilege:
> EXPLAIN  AUTHORIZATION  drop table test;
>  Permission denied: Principal [name=hadoop_ro, type=USER] does not have following privileges for operation DROPTABLE [[OBJECT OWNERSHIP] on Object [type=TABLE_OR_VIEW, name=greenh.test]]  |
> Test database is called greenh and created using hadoop user creds.
> But I can drop that table with hadoop_ro creds.
> > show tables;
> +-----------+--+
>  tab_name  
> +-----------+--+
>  test      
> +-----------+--+
> > drop table test;
> No rows affected (0.203 seconds)
> > show tables;
> +-----------+--+
>  tab_name  
> +-----------+--+
> +-----------+--+
> Is this a bug, or I missed something?



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)