I used Ranger to give access to project_id in nip.rc_sum.
However, I get the following error:
0: jdbc:hive2://> select project_id from nip.rc_sum; 17/03/28 12:47:22 [main]: ERROR parse.CalcitePlanner: org.apache.hadoop.hive.ql.metadata.HiveException: Unable to fetch table rc_sum. org.apache.hadoop.security.AccessControlException: Permission denied: user=marcia, access=EXECUTE, inode="/apps/hive/warehouse/nip.db/rc_sum":hive:hdfs:drwxrwx--- at org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.check(FSPermissionChecker.java:319)
How can this e fixed?
@Marcy you have created policy to giving access for hive table to user marcia, and it seems that works too,
but I think since doas=true in hive so hive uses marcia user for talking to hdfs, and user marcia does not have permission for hdfs path /apps/hive/warehouse/nip.db/rc_sum, can you please create hdfs policy (recursive true) for path /apps/hive and give access to marcia and retry the same operation.
I did as you said. But it is not working.
I have also done the following to login, either:
!connect jdbc:hive2:// user pass
!connect jdbc:hive2://localhost:10000/nip user pass
I can access tables I'm not supposed to see. And columns I'm supposed to see, I don't see....
please check following points:
1) is this a secure cluster? if yes then can you please make sure you are doing kinit with correct user.
>> I did as you said. But it is not working.
which approach you took from my comment?
can you please post the logs after the changes you did , what error you are seeing this time.
3) is policy download happening properly for hdfs & hive ?