[
https://issues.apache.org/jira/browse/SENTRY-922?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Eric Lin updated SENTRY-922:
----------------------------
Description:
Run the following command with correct URI permissions:
{code}
INSERT OVERWRITE DIRECTORY '/tmp/test' select * FROM sample_07 LIMIT 100;
{code}
without "LOCAL" keyword, sentry will complain the following:
{code}
Error: Error while compiling statement: FAILED: SemanticException No valid
privileges
Required privileges for this query:
Server=server1->URI=file:///tmp/test->action=*; (state=42000,code=40000)
{code}
However, after giving permission to "file:///tmp/test", query finished with
data in "hdfs:///tmp/test", even though no permission to "hdfs:///tmp/test" was
given.
was:
Run the following command with correct URI permissions:
{code}
INSERT OVERWRITE DIRECTORY '/tmp/test' select * FROM sample_07 LIMIT 100;
{code}
without "LOCAL" keyword, sentry will complain the following:
{code}
Error: Error while compiling statement: FAILED: SemanticException No valid
privileges
Required privileges for this query:
Server=server1->URI=file:///tmp/test->action=*; (state=42000,code=40000)
{code}
However, after giving permission to "file:///tmp/test", query finished with
data in "hdfs:///tmp/test", even though no permission to "hdfs:///tmp/test"
> INSERT OVERWRITE DIRECTORY permission not working correctly
> -----------------------------------------------------------
>
> Key: SENTRY-922
> URL: https://issues.apache.org/jira/browse/SENTRY-922
> Project: Sentry
> Issue Type: Bug
> Components: Sentry
> Affects Versions: 1.4.0
> Reporter: Eric Lin
>
> Run the following command with correct URI permissions:
> {code}
> INSERT OVERWRITE DIRECTORY '/tmp/test' select * FROM sample_07 LIMIT 100;
> {code}
> without "LOCAL" keyword, sentry will complain the following:
> {code}
> Error: Error while compiling statement: FAILED: SemanticException No valid
> privileges
> Required privileges for this query:
> Server=server1->URI=file:///tmp/test->action=*; (state=42000,code=40000)
> {code}
> However, after giving permission to "file:///tmp/test", query finished with
> data in "hdfs:///tmp/test", even though no permission to "hdfs:///tmp/test"
> was given.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
