tu gongxuan created HIVE-20104:
----------------------------------
Summary: Revoke privilege failure
Key: HIVE-20104
URL: https://issues.apache.org/jira/browse/HIVE-20104
Project: Hive
Issue Type: Bug
Components: Security
Affects Versions: 1.1.0
Reporter: tu gongxuan
I want to revoke the prilege from user,sometimes failure.
throught beeline ,show user likai privilege as following using show grant user
likai;
0: jdbc:hive2://172.29.61.12:10000> show grant user likai;
INFO : Compiling
command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c): show
grant user likai
INFO : Semantic Analysis Completed
INFO : Returning Hive schema: Schema(fieldSchemas:[FieldSchema(name:database,
type:string, comment:from deserializer), FieldSchema(name:table, type:string,
comment:from deserializer), FieldSchema(name:partition, type:string,
comment:from deserializer), FieldSchema(name:column, type:string, comment:from
deserializer), FieldSchema(name:principal_name, type:string, comment:from
deserializer), FieldSchema(name:principal_type, type:string, comment:from
deserializer), FieldSchema(name:privilege, type:string, comment:from
deserializer), FieldSchema(name:grant_option, type:boolean, comment:from
deserializer), FieldSchema(name:grant_time, type:bigint, comment:from
deserializer), FieldSchema(name:grantor, type:string, comment:from
deserializer)], properties:null)
INFO : Completed compiling
command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c); Time
taken: 0.001 seconds
INFO : Executing
command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c): show
grant user likai
INFO : Starting task [Stage-0:DDL] in serial mode
INFO : Completed executing
command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c); Time
taken: 0.041 seconds
INFO : OK
+-----------+-------------------------------+------------+---------+-----------------+-----------------+------------+---------------+----------------+----------+--+
| database | table | partition | column |
principal_name | principal_type | privilege | grant_option | grant_time
| grantor |
+-----------+-------------------------------+------------+---------+-----------------+-----------------+------------+---------------+----------------+----------+--+
| tmp | | | | likai
| USER | SELECT | false | 1476865827000 | admin
|
| tmp | 0530_zhonganbaimingdan | | | likai
| USER | SELECT | false | 1527755292000 | admin
|
| tmp | aes_20180307 | | | likai
| USER | ALL | true | 1520405354000 | likai
|
| tmp | houyue_20180523 | | | likai
| USER | ALL | true | 1527064113000 | likai
|
| tmp | houyue_3des_20180809 | | | likai
| USER | ALL | true | 1518155793000 | likai
|
| tmp | houyue_encry_20180208 | | | likai
| USER | ALL | true | 1518071185000 | likai
|
| tmp | houyue_encry_base64_20180208 | | | likai
| USER | ALL | true | 1518079661000 | likai
|
| tmp | houyue_test_20180127 | | | likai
| USER | ALL | true | 1517034444000 | likai
|
+-----------+-------------------------------+------------+---------+-----------------+-----------------+------------+---------------+----------------+----------+--+
8 rows selected (0.054 seconds)
0: jdbc:hive2://172.29.61.12:10000> revoke select on database tmp from user
likai;
INFO : Compiling
command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355):
revoke select on database tmp from user likai
INFO : Semantic Analysis Completed
INFO : Returning Hive schema: Schema(fieldSchemas:null, properties:null)
INFO : Completed compiling
command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355); Time
taken: 0.001 seconds
INFO : Executing
command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355):
revoke select on database tmp from user likai
INFO : Starting task [Stage-0:DDL] in serial mode
ERROR : FAILED: Execution Error, return code 1 from
org.apache.hadoop.hive.ql.exec.DDLTask.
org.apache.hadoop.hive.ql.metadata.HiveException:
org.apache.thrift.transport.TTransportException
INFO : Completed executing
command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355); Time
taken: 1.044 seconds
Error: Error while processing statement: FAILED: Execution Error, return code 1
from org.apache.hadoop.hive.ql.exec.DDLTask.
org.apache.hadoop.hive.ql.metadata.HiveException:
org.apache.thrift.transport.TTransportException (state=08S01,code=1)
if I grant another privilege to user likai,and revoke the privilege from likai
rightnow, it works.
but sometimes (not right now), it failure
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
