question Re: How to create external table without serveradmin rights? in Archives of Support Questions (Read Only)

How to create external table without serveradmin rights?

Tomas79 — Fri, 16 Sep 2022 10:17:54 GMT

Hi,

is it a bug, or a desired feature that the create external table (or change location of external table) is allowed only for serveradmin roles?

Based on the documentation the database ALL permission should be sufficient, but there is a statement that also the URI should be accessible.

However when I change my test user permission and remove serveradmin, he cannot create an external table pointing to his home directory such like this:

create table part ( i int, s string ) stored as textfile location '/user/testuser/part';

ERROR: AuthorizationException: User 'testuser@MYREALM.LOCAL' does not have privileges to access: hdfs://hdfscluster/user/testuser/part

After enabling the serveradmin right for testuser the command executes correctly and the table is created.

Any hints on this?

Thanks

Re: How to create external table without serveradmin rights?

mathieu.d — Wed, 17 Aug 2016 07:28:57 GMT

Hi,

I think sentry check if your user have specific permission on the "LOCATION" URI you have provided (and this is not related to HDFS ACL).

Try to grant, in sentry, that permission too.

For example :

GRANT ALL ON URI 'hdfs://hdfscluster/user/testuser/part' TO ROLE <a_role>;

regards,

mathieu

Re: How to create external table without serveradmin rights?

Tomas79 — Wed, 17 Aug 2016 08:13:11 GMT

Yes, you are right, there has to be a explicit grant on that URI, not just a HDFS access to the given directory.

I don't understand why the documentation do not explain it more clearly..

Thanks