Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

permission failure when using beeline

avatar
Rising Star

we are using ambari 2.6.2.2 with hdp 2.6.5

 

the permissions are being managed by the ranger, but checking the ranger settings, it's only managing the /apps/hive/warehouse directory on the hdfs

 

the problem we are having is in the /area/data/pll directory on the hdfs, this directory has acl rwx permission for the user

 

using beeline to create an external table is returning the error:

 

Error: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [service_user] does not have [ALL] privilege on [hdfs://service1/area/data/pll] (state=42000,code=40000)

 

but using hive cli does not return error, table is created successfully.

 

What could be causing this problem?

3 REPLIES 3

avatar
Master Collaborator

Hi @yagoaparecidoti Ranger Hive plugin only applies to Hiveserver2. Hive CLI should be protected using permissions at the HDFS folder/file level using Ranger or HDFS ACLs.

avatar
Rising Star

hi @Scharan 

 

so, does the ranger only work the permissions if it uses beeline or connections that access the hiveserver2 address?

avatar
Rising Star

hi @Scharan 

 

the same goes for sentry?