hive-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Xiaobing Zhou (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HIVE-7295) FileStatus.getOwner on Windows returns name of group the user belongs to, instead of user name expected, fails many authorization related unit tests
Date Thu, 26 Jun 2014 04:04:24 GMT

    [ https://issues.apache.org/jira/browse/HIVE-7295?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14044328#comment-14044328
] 

Xiaobing Zhou commented on HIVE-7295:
-------------------------------------

After digging, AuthorizationException is thrown inside HdfsAuthorizationProvider.checkPermissions(final
FileSystem fs...) because permissions to operate on DB path are not met. FileStatus.getOwner
gives out name of group, not user name expected for permission check going through. e.g. Administrators,
not xzhou. 

FileStatus.getGroup also returns group like machine-name\None, which does not match group
the user running program belongs to, operation on the path not permitted.



> FileStatus.getOwner on Windows returns name of group the user belongs to, instead of
user name expected, fails many authorization related unit tests
> ----------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: HIVE-7295
>                 URL: https://issues.apache.org/jira/browse/HIVE-7295
>             Project: Hive
>          Issue Type: Bug
>          Components: Authorization, HCatalog, Security, Windows
>    Affects Versions: 0.13.0
>         Environment: Windows Server 2008 R2
>            Reporter: Xiaobing Zhou
>            Priority: Critical
>
> Unit test in TestHdfsAuthorizationProvider, e.g. org.apache.hcatalog.security.TestHdfsAuthorizationProvider.testTableOps.
fails to run.
> Running org.apache.hcatalog.security.TestHdfsAuthorizationProvider
> Tests run: 1, Failures: 1, Errors: 0, Skipped: 0, Time elapsed: 15.799 sec <<<
FAILURE! - in org.apache.hcatalog.security.TestHdfsAuthorizationProvider
> testTableOps(org.apache.hcatalog.security.TestHdfsAuthorizationProvider)  Time elapsed:
15.546 sec  <<< FAILURE!
> junit.framework.AssertionFailedError: FAILED: AuthorizationException org.apache.hadoop.security.AccessControlException:
action WRITE not permitted on path pfile:/Users/xz
> hou/hworks/workspace/hwx-hive-ws/hive/hcatalog/core/target/warehouse for user xzhou expected:<0>
but was:<40000>
>         at junit.framework.Assert.fail(Assert.java:50)
>         at junit.framework.Assert.failNotEquals(Assert.java:287)
>         at junit.framework.Assert.assertEquals(Assert.java:67)
>         at junit.framework.Assert.assertEquals(Assert.java:199)
>         at org.apache.hcatalog.security.TestHdfsAuthorizationProvider.exec(TestHdfsAuthorizationProvider.java:172)
>         at org.apache.hcatalog.security.TestHdfsAuthorizationProvider.testTableOps(TestHdfsAuthorizationProvider.java:307)
>         



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message