dosubot[bot] commented on issue #36482: URL: https://github.com/apache/superset/issues/36482#issuecomment-3631993335
<!-- Greeting --> Hi @ABDevops-test! I'm [Dosu](https://go.dosu.dev/dosubot) and I’m helping the superset team. <!-- Answer --> This issue is likely caused by how Superset handles impersonation for StarRocks connections during query execution. When running queries in SQL Lab, Superset may execute a pre-query like `EXECUTE AS "username" WITH NO REVERT;` if impersonation is enabled for the database connection. If the impersonation fails or the effective user lacks privileges, StarRocks returns an "authentication required" error, even though listing tables works (because metadata operations skip this step) [[source](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/db_engine_specs/starrocks.py#L34-L250)]. Here’s a checklist to help resolve this: 1. **Check impersonation settings**: In Superset, go to your StarRocks database connection and see if "Impersonate the logged-in user" is enabled. If so, try disabling it and test query execution again. 2. **Verify user privileges**: Make sure the user specified in your connection string has permission to run queries and, if impersonation is enabled, that the impersonated user can run queries in StarRocks. 3. **Review connection string**: Confirm your connection string follows the format `starrocks://<User>:<Password>@<Host>:<Port>/<Catalog>.<Database>` and that credentials are correct [[source](https://github.com/apache/superset/blob/master/docs/docs/configuration/databases.mdx)]. 4. **Driver compatibility**: If you installed the latest StarRocks driver, there may be a SQLAlchemy version conflict. Use `starrocks==1.0.6` to ensure compatibility with Superset [[source](https://github.com/apache/superset/issues/31803)]. 5. **Check logs**: Look for detailed error messages in both Superset and StarRocks logs to pinpoint whether the failure is during the impersonation pre-query or the main query. If impersonation is not needed, disabling it is often the quickest fix. If you need impersonation, ensure the StarRocks user has the right privileges and that the pre-query works when run manually. For more details, see the [StarRocks Superset integration docs](https://docs.starrocks.io/docs/integrations/BI_integrations/Superset/). <!-- Dosu Comment Footer --> *To reply, just mention [@dosu](https://go.dosu.dev/dosubot).* --- <sup>How did I do? [Good](https://app.dosu.dev/response-feedback/7b9b8638-0788-48d1-a96d-fffec4fb2c9b?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/7b9b8638-0788-48d1-a96d-fffec4fb2c9b?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/7b9b8638-0788-48d1-a96d-fffec4fb2c9b?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/7b9b8638-0788-48d1-a96d-fffec4fb2c9b?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/7b9b8638-0788-48d1-a96d-fffec4fb2c9b?feedback_type=hallucination) | [Report 🐛](https://app.dosu.dev/response-feedback/7b9b8638-0788-48d1-a96d-fffec4fb2c9b?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/7b9b8638-0788-48d1-a96d-fffec4fb2c9b?feedback_type=other)</sup> [](https://app.dosu.dev/a28d3c7e-a9d3-459e-9fb6-3a6f9ff4f357/ask?utm_source=github) [](https://cursor.com/link/prompt?text=This%20issue%20is%20likely%20caused%20by%20how%20Superset%20handles%20impersonation%20for%20StarRocks%20connections%20during%20query%20execution.%20When%20running%20queries%20in%20SQL%20Lab%2C%20Superset%20may%20execute%20a%20pre-query%20like%20%60EXECUTE%20AS%20%22username%22%20WITH%20NO%20REVERT%3B%60%20if%20impersonation%20is%20enabled%20for%20the%20database%20connection.%20If%20the%20impersonation%20fails%20or%20the%20effective%20user%20lacks%20privileges%2C%20StarRocks%20returns%20an%20%22authentication%20required%22%20error%2C%20even%20though%20listing%20tables%20works%20%28because%20metadata%20operations%20skip%20this%20step%29%20%5B%5Bsource%5D%28https%3A//github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/db_ engine_specs/starrocks.py%23L34-L250%29%5D.%0A%0AHere%E2%80%99s%20a%20checklist%20to%20help%20resolve%20this%3A%0A%0A1.%20%2A%2ACheck%20impersonation%20settings%2A%2A%3A%20In%20Superset%2C%20go%20to%20your%20StarRocks%20database%20connection%20and%20see%20if%20%22Impersonate%20the%20logged-in%20user%22%20is%20enabled.%20If%20so%2C%20try%20disabling%20it%20and%20test%20query%20execution%20again.%0A2.%20%2A%2AVerify%20user%20privileges%2A%2A%3A%20Make%20sure%20the%20user%20specified%20in%20your%20connection%20string%20has%20permission%20to%20run%20queries%20and%2C%20if%20impersonation%20is%20enabled%2C%20that%20the%20impersonated%20user%20can%20run%20queries%20in%20StarRocks.%0A3.%20%2A%2AReview%20connection%20string%2A%2A%3A%20Confirm%20your%20connection%20string%20follows%20the%20format%20%60starrocks%3A//%3CUser%3E%3A%3CPassword%3E%40%3CHost%3E%3A%3CPort%3E/%3CCatalog%3E.%3CDatabase%3E%60%20and%20that%20credentials%20are%20correct%20%5B%5Bsource%5D%28https%3A//github.com/apache/sup erset/blob/master/docs/docs/configuration/databases.mdx%29%5D.%0A4.%20%2A%2ADriver%20compatibility%2A%2A%3A%20If%20you%20installed%20the%20latest%20StarRocks%20driver%2C%20there%20may%20be%20a%20SQLAlchemy%20version%20conflict.%20Use%20%60starrocks%3D%3D1.0.6%60%20to%20ensure%20compatibility%20with%20Superset%20%5B%5Bsource%5D%28https%3A//github.com/apache/superset/issues/31803%29%5D.%0A5.%20%2A%2ACheck%20logs%2A%2A%3A%20Look%20for%20detailed%20error%20messages%20in%20both%20Superset%20and%20StarRocks%20logs%20to%20pinpoint%20whether%20the%20failure%20is%20during%20the%20impersonation%20pre-query%20or%20the%20main%20query.%0A%0AIf%20impersonation%20is%20not%20needed%2C%20disabling%20it%20is%20often%20the%20quickest%20fix.%20If%20you%20need%20impersonation%2C%20ensure%20the%20StarRocks%20user%20has%20the%20right%20privileges%20and%20that%20the%20pre-query%20works%20when%20run%20manually.%20For%20more%20details%2C%20see%20the%20%5BStarRocks%20Superset%20integration%20docs%5D%28https%3 A//docs.starrocks.io/docs/integrations/BI_integrations/Superset/%29.) [](https://go.dosu.dev/discord-bot) [](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/issues/36482) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
