https://community.cloudera.com/t5/Support-Questions/Querying-a-Hive-Table-via-Hiveserver2-with-Column-Masking/m-p/167265#M129597 <P>I tried the above scenario and <A rel="user" href="https://community.cloudera.com/users/15925/navendugarg.html" nodeid="15925">@Navendu Garg</A>'s exact issue is described below: </P><P>There is a table say 'default.testtable1' with one of the column names containing a space say 'account name'. </P><P>[create table testtable1(Name String,`Account number` String,Age int);</P><P>...log/webhcat/webhcat.log.2017-02-14:hive.support.quoted.identifiers=column]</P><P>A user say 'user1' has a Hive access policy granting all permissions to user1 on default.testtable1, all columns. </P><P>There is also a masking policy which masks column 'name' in same table 'default.testtable1' with mask type='redact' for user1.</P><P>select * from default.testtable1 throws:</P><PRE>Error: Error while compiling statement: FAILED: SemanticException org.apache.hadoop.hive.ql.parse.ParseException: line 1:41 rule Identifier failed predicate: {allowQuotedId()}? line 1:56 rule Identifier failed predicate: {allowQuotedId()}? line 1:129 rule Identifier failed predicate: {allowQuotedId()}? line 1:144 rule Identifier failed predicate: {allowQuotedId()}? (state=42000,code=40000)</PRE><P>Audit shows only masking policy allowed the txn. There is no deny and no access policy mentioned in the audit. The flow didn't reach the access policies auth.</P><P>On disabling the masking policy, the select shows correct results.</P><P>NOTE: I tried it with mask type as 'Hash','Partial mask','Nullify' and same result.</P><P><A href="https://community.hortonworks.com/questions/82350/querying-a-hive-table-via-hiveserver2-with-column.html#">@Madhan Neethiraj</A>, Will you pls confirm if this is expected - If any of the column names in a table contain spaces and there is a mask policy on any of that table's columns, then select with fail with the above exception.</P> Thu, 16 Feb 2017 03:47:10 GMT aleekha 2017-02-16T03:47:10Z