ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Don Bosco Durai (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (RANGER-930) Restricting Table names with the "Update" permission for HIVE does not work
Date Sun, 01 May 2016 22:43:12 GMT

     [ https://issues.apache.org/jira/browse/RANGER-930?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Don Bosco Durai updated RANGER-930:
-----------------------------------
    Assignee: Madhan Neethiraj

> Restricting Table names with the "Update" permission for HIVE does not work
> ---------------------------------------------------------------------------
>
>                 Key: RANGER-930
>                 URL: https://issues.apache.org/jira/browse/RANGER-930
>             Project: Ranger
>          Issue Type: Bug
>          Components: plugins
>    Affects Versions: 0.6.0
>            Reporter: Colm O hEigeartaigh
>            Assignee: Madhan Neethiraj
>            Priority: Blocker
>             Fix For: 0.6.0
>
>
> If I create a Ranger policy for a specific Table with "SELECT" + "UPDATE" permissions,
the user can't actually invoke an "insert" query in HIVE, e.g.:
> H110 Unable to submit statement. Error while compiling statement: FAILED: HiveAccessControlException
Permission denied: user [colm] does not have [SELECT] privilege on [default/values__tmp__table__3/tmp_values_col1,tmp_values_col2]
[ERROR_STATUS]
> It looks like there is an issue with access verification for temporary tables. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message