Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-20104

Revoke privilege failure

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Minor
    • Resolution: Unresolved
    • 1.1.0
    • None
    • Security
    • None

    Description

      I want to revoke the prilege from user,sometimes failure.

      throught beeline ,show user likai privilege as following using show grant user likai;

      0: jdbc:hive2://172.29.61.12:10000> show grant user likai;
      INFO  : Compiling command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c): show grant user likai
      INFO  : Semantic Analysis Completed
      INFO  : Returning Hive schema: Schema(fieldSchemas:[FieldSchema(name:database, type:string, comment:from deserializer), FieldSchema(name:table, type:string, comment:from deserializer), FieldSchema(name:partition, type:string, comment:from deserializer), FieldSchema(name:column, type:string, comment:from deserializer), FieldSchema(name:principal_name, type:string, comment:from deserializer), FieldSchema(name:principal_type, type:string, comment:from deserializer), FieldSchema(name:privilege, type:string, comment:from deserializer), FieldSchema(name:grant_option, type:boolean, comment:from deserializer), FieldSchema(name:grant_time, type:bigint, comment:from deserializer), FieldSchema(name:grantor, type:string, comment:from deserializer)], properties:null)
      INFO  : Completed compiling command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c); Time taken: 0.001 seconds
      INFO  : Executing command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c): show grant user likai
      INFO  : Starting task [Stage-0:DDL] in serial mode
      INFO  : Completed executing command(queryId=hive_20180706161515_0768d0e5-84a5-4601-9fdf-ab37a938188c); Time taken: 0.041 seconds
      INFO  : OK
      ------------------------------------------------------------------------------------------------------------------------------------

      database               table             partition  column  principal_name  principal_type  privilege  grant_option     grant_time   grantor 

      ------------------------------------------------------------------------------------------------------------------------------------

      tmp                                                           likai           USER            SELECT     false         1476865827000  admin   
      tmp       0530_zhonganbaimingdan                             likai           USER            SELECT     false         1527755292000  admin   
      tmp       aes_20180307                                       likai           USER            ALL        true          1520405354000  likai   
      tmp       houyue_20180523                                    likai           USER            ALL        true          1527064113000  likai   
      tmp       houyue_3des_20180809                               likai           USER            ALL        true          1518155793000  likai   
      tmp       houyue_encry_20180208                              likai           USER            ALL        true          1518071185000  likai   
      tmp       houyue_encry_base64_20180208                       likai           USER            ALL        true          1518079661000  likai   
      tmp       houyue_test_20180127                               likai           USER            ALL        true          1517034444000  likai   

      ------------------------------------------------------------------------------------------------------------------------------------
      8 rows selected (0.054 seconds)

       

      0: jdbc:hive2://172.29.61.12:10000> revoke select on database tmp from user likai;
      INFO  : Compiling command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355): revoke select on database tmp from user likai
      INFO  : Semantic Analysis Completed
      INFO  : Returning Hive schema: Schema(fieldSchemas:null, properties:null)
      INFO  : Completed compiling command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355); Time taken: 0.001 seconds
      INFO  : Executing command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355): revoke select on database tmp from user likai
      INFO  : Starting task [Stage-0:DDL] in serial mode
      ERROR : FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. org.apache.hadoop.hive.ql.metadata.HiveException: org.apache.thrift.transport.TTransportException
      INFO  : Completed executing command(queryId=hive_20180706161515_cb1ca248-e891-4315-8f53-fb9c7ae5c355); Time taken: 1.044 seconds
      Error: Error while processing statement: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. org.apache.hadoop.hive.ql.metadata.HiveException: org.apache.thrift.transport.TTransportException (state=08S01,code=1)

       

      if I grant another privilege to user likai,and revoke the privilege from likai rightnow, it works.

      but sometimes (not right now), it failure

       

       

      Attachments

        Activity

          People

            06094051 zhaoyingchao
            tugx69 tu gongxuan
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: