01-17-2019 12:42 AM - last edited on 01-17-2019 06:04 AM by cjervis
When using impala under CDH 5.15, refreshing functions under specifc databases by some user will got an error like "AuthorizationException : user aaa does not have privileges to access: server" .
The system is centry enabled with kerberos.
What privileges shall we grant to the user ?
01-17-2019 03:03 PM
01-17-2019 04:52 PM
01-17-2019 04:58 PM
CREATE DATABASE shared_udfs; USE shared_udfs; ...use CREATE FUNCTION statements in Hive to create some Java-based UDFs that Impala is not initially aware of... REFRESH FUNCTIONS shared_udfs; SELECT udf_created_by_hive(c1) FROM ...
01-17-2019 10:46 PM
01-20-2019 05:34 PM
It seems that only db_name is needed according to
REFRESH FUNCTIONS db_name
And in 2.X version of impala the only way is to grant all on server to the role, while in Impala 3.0 and higher the minimum level of privileges required by refresh functions is to grant refresh on database to the role.