Fix HiveAccessControlException Permission Denied During Beeline INSERT OVERWRITE DIRECTORY

[#1]

INSERT OVERWRITE DIRECTORY '/tmp' ROW FORMAT DELIMITED FIELDS TERMINATED BY '\t' STORED AS TEXTFILE SELECT visit_id, ivm from abcd.xyz WHERE feed_date BETWEEN '2006-04-01' and '2006-05-01' AND ivm IS NOT NULL limit 10;

Error: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [rvchinta] does not have [WRITE] privilege on [/tmp] (state=42000,code=40000) 0: jdbc:hive2://hostname.abc.com:8443>

ranger policy /tmp has 777 to public

HDP version 2.6.1

[#2]

I do not see this permission denied in ranger audit as well.

[#3]

INSERT OVERWRITE DIRECTORY "hdfs://sandbox-hdp.hortonworks.com/tmp/hey2" SELECT * FROM mytable;

(i.e. you need to specify full name of cluster) works fine when you have correct configuration in Ranger, but INSERT OVERWRITE DIRECTORY "/tmp/hey2" SELECT * FROM mytable; will fail. At least this is true for HDP 2.6.3

[#4]

Hi,

Is there a workaround solution for the above or is it a behaviour of 2.6.3 and above?

[#5]

i updated directory path to hdfs:CLUSTERNAMEHA/tmp and it worked.

[#6 · Accepted solution]

I can confirm that I had the same problem on HDP 2.6.3. Like suggested, using the fully qualified path (hdfs://<cluster>/path) makes it work.