tooptoop4 commented on issue #36: [RANGER-2395] Add Presto plugin URL: https://github.com/apache/ranger/pull/36#issuecomment-520921729 @bolkedebruin running SET SESSION query_max_run_time = '10m' is always denied. com.facebook.presto.spi.security.AccessDeniedException: Access Denied: Cannot set system session property query_max_run_time at com.facebook.presto.spi.security.AccessDeniedException.denySetSystemSessionProperty(AccessDeniedException.java:281) at com.facebook.presto.spi.security.AccessDeniedException.denySetSystemSessionProperty(AccessDeniedException.java:276) at org.apache.ranger.authorization.presto.authorizer.RangerSystemAccessControl.checkCanSetSystemSessionProperty(RangerSystemAccessControl.java:133) at org.apache.ranger.authorization.presto.authorizer.RangerSystemAccessControl.checkCanSetSystemSessionProperty(RangerSystemAccessControl.java:80) at com.facebook.presto.security.AccessControlManager.lambda$checkCanSetSystemSessionProperty$56(AccessControlManager.java:508) at com.facebook.presto.security.AccessControlManager.authorizationCheck(AccessControlManager.java:717) at com.facebook.presto.security.AccessControlManager.checkCanSetSystemSessionProperty(AccessControlManager.java:508) at com.facebook.presto.execution.SetSessionTask.execute(SetSessionTask.java:62) at com.facebook.presto.execution.SetSessionTask.execute(SetSessionTask.java:40) at com.facebook.presto.execution.DataDefinitionExecution.start(DataDefinitionExecution.java:169) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748) Could there be issue in https://github.com/apache/ranger/blob/master/plugin-presto/src/main/java/org/apache/ranger/authorization/presto/authorizer/RangerSystemAccessControl.java#L131 ? I already have ADMIN policy in ranger
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
