I have recently setup sentry, all of the role based permissions seem to be working well. However, I noticed that I am unable to create tables from the hive cli now. I receive the following error: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. MetaException(message:User cloudera does not have privileges for CREATETABLE). I can create tables while connected through beeline though as user cloudera.
Does using sentry service restrict access to the hive cli? I have set user "cloudera" with the following: CREATE ROLE super_user. GRANT ALL ON SERVER server1 to ROLE super_user. GRANT ROLE super_user TO GROUP cloudera.
I can still run queries normally and mapreduce jobs through the hive cli as user "cloudera" just lost the ability to create tables.