[ 
https://issues.apache.org/jira/browse/HIVE-26765?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Ádám Szita resolved HIVE-26765.
-------------------------------
    Fix Version/s: 4.0.0
       Resolution: Fixed

Merged to master. Thanks [~simhadri-g]!

> Hive Ranger URL policy  for insert overwrite directory denies access when  
> fully qualified paths are passed 
> ------------------------------------------------------------------------------------------------------------
>
>                 Key: HIVE-26765
>                 URL: https://issues.apache.org/jira/browse/HIVE-26765
>             Project: Hive
>          Issue Type: Bug
>            Reporter: Simhadri Govindappa
>            Assignee: Simhadri Govindappa
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 4.0.0
>
>          Time Spent: 0.5h
>  Remaining Estimate: 0h
>
> Started seeing this issue after HIVE-25570 was merged.
>  
> {noformat}
> 0: jdbc:hive2://sim-hive-1.sim-hive.root.hwx.> INSERT OVERWRITE DIRECTORY 
> '/user/hive/ozloasvr/output' SELECT table1.name, SUM(price) FROM table1 FULL 
> OUTER JOIN table2 ON (table1.id = table2.id) GROUP BY table1.name;
> Error: Error while compiling statement: FAILED: HiveAccessControlException 
> Permission denied: user [livy] does not have [ALL] privilege on 
> [hdfs://sim-hive-1.sim-hive.root.hwx.site:8020/user/hive/ozloasvr/output] 
> (state=42000,code=40000){noformat}
> This needs to be fixed  in ranger , until then we should provide an option to 
> switch between hive passing fully qualified or relative url for ranger for 
> auth.
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to