Simhadri Govindappa created HIVE-26765:
------------------------------------------
Summary: Hive Ranger URL policy for insert overwrite directory
denies access when fully qualified paths are passed
Key: HIVE-26765
URL: https://issues.apache.org/jira/browse/HIVE-26765
Project: Hive
Issue Type: Bug
Reporter: Simhadri Govindappa
Assignee: Simhadri Govindappa
Started seeing this issue after HIVE-25570 was merged.
{noformat}
0: jdbc:hive2://sim-hive-1.sim-hive.root.hwx.> INSERT OVERWRITE DIRECTORY
'/user/hive/ozloasvr/output' SELECT table1.name, SUM(price) FROM table1 FULL
OUTER JOIN table2 ON (table1.id = table2.id) GROUP BY table1.name;
Error: Error while compiling statement: FAILED: HiveAccessControlException
Permission denied: user [livy] does not have [ALL] privilege on
[hdfs://sim-hive-1.sim-hive.root.hwx.site:8020/user/hive/ozloasvr/output]
(state=42000,code=40000){noformat}
This needs to be fixed in ranger , until then we should provide an option to
switch between hive passing fully qualified or relative url for ranger for auth.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
