[
https://issues.apache.org/jira/browse/HIVE-5961?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13894299#comment-13894299
]
Thejas M Nair commented on HIVE-5961:
-------------------------------------
Sure, I will take a look at it. This can be useful for developers for debugging.
FYI, for users I have introduced better error messages in HIVE-5953 . eg
{noformat}
"Permission denied. Principal [name=user2, type=USER] does not have following
privileges on Hive Object [type=TABLE, dbname=default,
table/viewname=table_priv_allf] :DELETE with grant, SELECT with grant, UPDATE
with grant"
{noformat}
> Add explain authorize for checking privileges
> ---------------------------------------------
>
> Key: HIVE-5961
> URL: https://issues.apache.org/jira/browse/HIVE-5961
> Project: Hive
> Issue Type: Improvement
> Components: Authorization
> Reporter: Navis
> Assignee: Navis
> Priority: Trivial
> Attachments: HIVE-5961.1.patch.txt, HIVE-5961.2.patch.txt,
> HIVE-5961.3.patch.txt, HIVE-5961.4.patch.txt
>
>
> For easy checking of need privileges for a query,
> {noformat}
> explain authorize select * from src join srcpart
> INPUTS:
> default@srcpart
> default@srcpart@ds=2008-04-08/hr=11
> default@srcpart@ds=2008-04-08/hr=12
> default@srcpart@ds=2008-04-09/hr=11
> default@srcpart@ds=2008-04-09/hr=12
> default@src
> OUTPUTS:
>
> file:/home/navis/apache/oss-hive/itests/qtest/target/tmp/localscratchdir/hive_2013-12-04_21-57-53_748_5323811717799107868-1/-mr-10000
> CURRENT_USER:
> hive_test_user
> OPERATION:
> QUERY
> AUTHORIZATION_FAILURES:
> No privilege 'Select' found for inputs { database:default, table:srcpart,
> columnName:key}
> No privilege 'Select' found for inputs { database:default, table:src,
> columnName:key}
> No privilege 'Select' found for inputs { database:default, table:src,
> columnName:key}
> {noformat}
> Hopefully good for debugging of authorization, which is in progress on
> HIVE-5837.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
