You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@impala.apache.org by "liangwei wei (Jira)" <ji...@apache.org> on 2020/02/24 11:41:00 UTC

[jira] [Closed] (IMPALA-9024) get exception "AuthorizationException: User 'user_xql' does not have privileges to execute 'CREATE' on: default" on hue , even if set all privileges

     [ https://issues.apache.org/jira/browse/IMPALA-9024?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

liangwei wei closed IMPALA-9024.
--------------------------------
    Resolution: Not A Bug

> get exception "AuthorizationException: User 'user_xql' does not have privileges to execute 'CREATE' on: default" on hue , even if set all privileges 
> -----------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: IMPALA-9024
>                 URL: https://issues.apache.org/jira/browse/IMPALA-9024
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Frontend
>    Affects Versions: Impala 3.2.0
>            Reporter: liangwei wei
>            Priority: Major
>
> I integrated impala and sentry of cdh6.3.0 in hue and gave impala server level "all"  permissions, but I found that any Submission on hue showed no permission to execute(oprate on hue!). After debug, it was found that sentry would call bitFieldActionFactory. getActionByName (policy Value) to find "all" action, but Action "all" in Privilege class  was defined as *, so resulted in null return and failed privilege validation.
> so I think change the code in Privilege.java like this can solve problem
> {code:java}
>  ALL("all",
>         SELECT.getCode() |
>         INSERT.getCode() |
>         ALTER.getCode() |
>         CREATE.getCode() |
>         DROP.getCode() |
>         REFRESH.getCode())
> {code}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)