[jira] [Updated] (SENTRY-157) Support filter pushdown in DB Store client to reduce data transfer from DB Store service

["Arun Suresh (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SENTRY-157?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Arun Suresh updated SENTRY-157:
-------------------------------

    Attachment: SENTRY-157.1.patch

Attaching patch to push down Authorizable Hierarchy

> Support filter pushdown in DB Store client to reduce data transfer from DB Store service
> ----------------------------------------------------------------------------------------
>
>                 Key: SENTRY-157
>                 URL: https://issues.apache.org/jira/browse/SENTRY-157
>             Project: Sentry
>          Issue Type: Bug
>    Affects Versions: 1.4.0
>            Reporter: Prasad Mujumdar
>            Assignee: Arun Suresh
>         Attachments: SENTRY-157.1.patch
>
>
> The authorization provider retrieves all the privileges for the given set of groups. This could be a huge data set if there are a large number of privileges in the system. A downstream consumer like HiveServer2 will be reading this for each query. This could impact the DB store performance if there are multiple active queries and numerous privilege rules.
> We could consider pushing the filters like DB object name to the policy provider to prune the privilege result set at the source.



--
This message was sent by Atlassian JIRA
(v6.2#6252)