“add jar” command throws “Insufficient privileges to execute add” exception even for admin role

https://issues.apache.org/jira/browse/SENTRY-147

0: jdbc:hive2://......:10000/default> add jar /home/direp_hv_qa/satish/hive-udf-7.jar;
Error: Insufficient privileges to execute add (state=42000,code=0)
java.sql.SQLException: Insufficient privileges to execute add
at org.apache.hive.jdbc.Utils.verifySuccess(Utils.java:167)
at org.apache.hive.jdbc.Utils.verifySuccessWithInfo(Utils.java:155)
at org.apache.hive.jdbc.HiveStatement.execute(HiveStatement.java:210)
at org.apache.hive.beeline.Commands.execute(Commands.java:736)
at org.apache.hive.beeline.Commands.sql(Commands.java:657)
at org.apache.hive.beeline.BeeLine.dispatch(BeeLine.java:779)
at org.apache.hive.beeline.BeeLine.begin(BeeLine.java:646)
at org.apache.hive.beeline.BeeLine.mainWithInputRedirection(BeeLine.java:365)
at org.apache.hive.beeline.BeeLine.main(BeeLine.java:348)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at org.apache.hadoop.util.RunJar.main(RunJar.java:212)

I'm receiving this exception even for users of admin role,
Is this an issue with sentry.

as all other load, select create and drop are working as per privileges set in the policy file.

for "add jar" command its failing even for users of admin role.

Under Sentry you want an admin to inspect all Jars and then add them globally using

hive.aux.jars.path=/path/to/jar

ADD JAR Restricted unless

hive.server2.authorization.external.exec=true
hive.security.authorization.enabled=false

QQ截图20160201112627

QQ截图20160201112715

One Response so far.

  1. What’s up everybody, here every one is sharing such familiarity, thus it’s pleasant to read this blog, and
    I used to pay a quick visit this website everyday.