Permission denied to non-superuser on GPHDFS external tables

[Douglas Spadotto]

Hi everyone,

Are superusers the only ones that can create GPHDFS external tables?

My scenario: I created a user with CREATEEXTTABLE privilege, granted INSERT, then desperately ALL on protocol GPHDFS to this user and I still get "ERROR:  permission denied for external protocol gphdfs" whenever I attempt to create an external table with this user.

http://greenplum.org/docs/ref_guide/sql_commands/ALTER_ROLE.html says that "... external tables that use the file or execute protocols can only be created by superusers.".

Then another way of putting the original question is: Is GPHDFS a "file or execute protocol"?

Thanks in advance,

Douglas

-----

Frodo: "I wish none of this had happened." 

Gandalf: "So do all who live to see such times, but that is not for them to decide. All we have to decide is what to do with the time that is given to us."

-- Lord of the Rings: The Fellowship of the Ring (2001)

[Jon Roberts]

I believe you'll need to alter the role to enable CREATEEXTTABLE and also specify the protocol GPHDFS.

Example:

ALTER ROLE load CREATEEXTTABLE (type='writable', protocol='gphdfs');

Docs:

http://gpdb.docs.pivotal.io/43130/admin_guide/load/topics/g-grant-privileges-for-the-hdfs-protocol.html

http://gpdb.docs.pivotal.io/43130/ref_guide/sql_commands/ALTER_ROLE.html

Jon

--
You received this message because you are subscribed to the Google Groups "Greenplum Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gpdb-users+unsubscribe@greenplum.org.
To post to this group, send email to gpdb-...@greenplum.org.
Visit this group at https://groups.google.com/a/greenplum.org/group/gpdb-users/.
For more options, visit https://groups.google.com/a/greenplum.org/d/optout.

[Douglas Spadotto]

It is deprecated even on 4.3.10, but... it does work!

Attached the evidence.

Thanks again,

Douglas

On Mon, May 15, 2017 at 5:45 PM, Jon Roberts <jrob...@pivotal.io> wrote:

It might be deprecated in GPDB5.  

Jon Roberts

Principal Engineer | jrob...@pivotal.io | 615-426-8661

On Mon, May 15, 2017 at 3:43 PM, Douglas Spadotto <dougsp...@gmail.com> wrote:

Thanks Jon.

I found some tests on github showing 'type' and 'protocol' as deprecated, so I didn't try them.

Will try them later.

Regards,

Douglas

--

Visite: http://canseidesercowboy.wordpress.com/

Siga: @dougspadotto ou @excowboys