[ https://issues.apache.org/jira/browse/HIVE-8954?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14695234#comment-14695234 ]
LINTE commented on HIVE-8954: ----------------------------- Thejas M Nair, yes I have the same configuration. But I don't activate anything at compile time to enforce StorageBasedAuthorization (maybe I misunderstood what you call "compile time"). Regards, > StorageBasedAuthorizationProvider Check write permission on HDFS on SELECT > SQL request > -------------------------------------------------------------------------------------- > > Key: HIVE-8954 > URL: https://issues.apache.org/jira/browse/HIVE-8954 > Project: Hive > Issue Type: Bug > Components: Authorization > Affects Versions: 0.14.0 > Environment: centos 6.5 > Reporter: LINTE > > With hive.security.metastore.authorization.manager set to > org.apache.hadoop.hive.ql.security.authorization.StorageBasedAuthorizationProvider. > It seem that on a read request, write permissions are check on the HDFS by > the metastore. > sample : > bash# hive > hive (default)> use database; > OK > Time taken: 0.747 seconds > hive (database)> SELECT * FROM table LIMIT 10; > FAILED: HiveException java.security.AccessControlException: action WRITE not > permitted on path hdfs://cluster/hive_warehouse/database.db/table for user > myuser -- This message was sent by Atlassian JIRA (v6.3.4#6332)