Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] [AUTHZ] Table owner can not update/delete hudi tables they have created #6718

Open
3 of 4 tasks
maomaodev opened this issue Sep 26, 2024 · 1 comment
Open
3 of 4 tasks
Labels
kind:bug This is a clearly a bug priority:major

Comments

@maomaodev
Copy link

Code of Conduct

Search before asking

  • I have searched in the issues and found no similar issues.

Describe the bug

Kyuubi version 1.9.0, Spark version 3.4.2, Hudi version 0.14.1

  1. In Ranger, the user "user_read" has only the permission to create tables, and for "all - database, table, column", the {owner} has ALL permissions.
  2. The user "user_read" can successfully create Hudi tables and perform normal inserts.
    create table hudi_db.hudi_t(id bigint, name string, price double, part string) using hudi tblproperties (type='cow',primaryKey ='id');
    insert into hudi_db.hudi_t values(100, 'apple', 80.5,'part1'),(200, 'apple', 80.5,'part2');
  3. The user "user_read" does not have the permission to update/delete the Hudi tables created.
    update hudi_db.hudi_t set id =150 where id=100;
    The error message is as follows:
    [ERROR] [main] Failed in [update hudi_db.hudi_t set id =150 where id=100] (org.apache.spark.sql.hive.thriftserver.SparkSQLDriver(org.apache.spark.internal.Logging.logError:97)) org.apache.kyuubi.plugin.spark.authz.AccessControlException: Permission denied: user [user_read] does not have [update] privilege on [hudi_db/hudi_t]

Affects Version(s)

1.9.0/1.9.2

Kyuubi Server Log Output

No response

Kyuubi Engine Log Output

No response

Kyuubi Server Configurations

No response

Kyuubi Engine Configurations

No response

Additional context

No response

Are you willing to submit PR?

  • Yes. I would be willing to submit a PR with guidance from the Kyuubi community to fix.
  • No. I cannot submit a PR at this time.
@maomaodev maomaodev added kind:bug This is a clearly a bug priority:major labels Sep 26, 2024
Copy link

Hello @maomaodev,
Thanks for finding the time to report the issue!
We really appreciate the community's efforts to improve Apache Kyuubi.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind:bug This is a clearly a bug priority:major
Projects
None yet
Development

No branches or pull requests

1 participant