“add jar” command throws “Insufficient privileges to execute add” exception even for admin role

https://issues.apache.org/jira/browse/SENTRY-147

0: jdbc:hive2://......:10000/default> add jar /home/direp_hv_qa/satish/hive-udf-7.jar;
Error: Insufficient privileges to execute add (state=42000,code=0)
java.sql.SQLException: Insufficient privileges to execute add
at org.apache.hive.jdbc.Utils.verifySuccess(Utils.java:167)
at org.apache.hive.jdbc.Utils.verifySuccessWithInfo(Utils.java:155)
at org.apache.hive.jdbc.HiveStatement.execute(HiveStatement.java:210)
at org.apache.hive.beeline.Commands.execute(Commands.java:736)
at org.apache.hive.beeline.Commands.sql(Commands.java:657)
at org.apache.hive.beeline.BeeLine.dispatch(BeeLine.java:779)
at org.apache.hive.beeline.BeeLine.begin(BeeLine.java:646)
at org.apache.hive.beeline.BeeLine.mainWithInputRedirection(BeeLine.java:365)
at org.apache.hive.beeline.BeeLine.main(BeeLine.java:348)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at org.apache.hadoop.util.RunJar.main(RunJar.java:212)

I'm receiving this exception even for users of admin role,
Is this an issue with sentry.

as all other load, select create and drop are working as per privileges set in the policy file.

for "add jar" command its failing even for users of admin role.

Under Sentry you want an admin to inspect all Jars and then add them globally using

hive.aux.jars.path=/path/to/jar

ADD JAR Restricted unless

hive.server2.authorization.external.exec=true
hive.security.authorization.enabled=false

QQ截图20160201112627

QQ截图20160201112715

1 thought on ““add jar” command throws “Insufficient privileges to execute add” exception even for admin role

Leave a Reply

Your email address will not be published. Required fields are marked *