hive-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Anuj Lal <a...@lendingclub.com>
Subject hive: SQLStdAuth : grant all on database doesn't give grant on underneath tables
Date Mon, 16 Oct 2017 19:55:55 GMT
hive: SQLStdAuth : grant all on database doesn't give grant on underneath tables
Question by anuj lal<https://community.hortonworks.com/users/45483/anujlal.html> 49
minutes ago Hive<https://community.hortonworks.com/topics/Hive.html>hiveserver2<https://community.hortonworks.com/topics/hiveserver2.html>
hive: SQLStdAuth : grant all on database doesn't give grant on underneath table
1. create database testdb as hive user
2. created table in employee under testdb
3. Created user a123test
4. grant ALL on database testdb to user a123test;
5. Login form beeline as user a123test
6. selct count(*) from employee
above gives me
HiveAccessControlException Permission denied: Principal [name=a123test, type=USER] does not
have following privileges for operation QUERY [[SELECT] on Object [type=TABLE_OR_VIEW, name=testdb.employee]]
(state=42000,code=40000)
7. If i do
grant insert,update,delete,select on table testdb.employee to user a123test;
then user a123test can select from employee table
My question is if I grant ALL at database level, why i have to give tabe level grant?
Is there any way I can give database level select/insert/Update instead of defining grant
at each table level for user/role?



DISCLAIMER: The information transmitted is intended only for the person or entity to which
it is addressed and may contain confidential and/or privileged material. Any review, re-transmission,
dissemination or other use of, or taking of any action in reliance upon this information by
persons or entities other than the intended recipient is prohibited except as set forth below.
If you received this in error, please contact the sender and destroy any copies of this document
and any attachments. Email sent or received by LendingClub Corporation, its subsidiaries and
affiliates is subject to archival, monitoring and/or review by and/or disclosure to someone
other than the recipient.
Mime
View raw message