Cannot Execute "system.query" with Ranger

[mertalpt]

I am having permission issues with system.query when using the Ranger plugin.

When I ran queries like:

SELECT * FROM TABLE(foo.system.query(query => 'SELECT * FROM public.bar LIMIT 10'));

I get errors of the type:

trino error: TrinoUserError(type=USER_ERROR, name=PERMISSION_DENIED, message="Access Denied: Cannot execute function foo.system.query", query_id=20250723_133714_00059_w546p)

I could not find useful information about this after some very long researching. Best I can find is that I create a policy to grant EXECUTE on foo.system.query schema function. However, there is no EXECUTE permission for schema functions as seen here.

I am using Trino 468 with Ranger 2.5.0 at the moment. This was not an issue with Trino 418 and Ranger 2.4.0. But I see that this has been added after 418.

We had to do a migration when upgrading Ranger and manually updated the service definition for Trino. So, the reason might be that there was an error with the migration but relevant sections look correct.

Is this a known issue? Are there any solutions?