My Oracle Support Banner

BDA Users Get Error in Impala Web UI: "AuthorizationException: User '<USERNAME>' does not have privileges to see the definition of view '<VIEW_NAME>'" (Doc ID 2632823.1)

Last updated on JANUARY 30, 2020

Applies to:

Big Data Appliance Integrated Software - Version 4.13.0 and later
Information in this document applies to any platform.

Symptoms

When using BDA 4.13 / CDH 5.15.1 on an AD kerberized cluster with Sentry, users are unable to successfully run "show create table" on view definitions through Impala web UI.
For example, the command below fails with error indicated:


If the "show create table" command is run in Hive CLI it works.

This only happens in Impala web UI and it affects multiple users. In this cluster, access to tables is granted at the group level and is controlled by Sentry and AD groups (i.e. database to role to AD group to user's Windows ID).

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.