You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sentry.apache.org by "Shreepadma Venugopalan (JIRA)" <ji...@apache.org> on 2014/03/12 23:12:46 UTC
[jira] [Commented] (SENTRY-136) Thrift request structs should
include the groupName in addition to the userName
[ https://issues.apache.org/jira/browse/SENTRY-136?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13932497#comment-13932497 ]
Shreepadma Venugopalan commented on SENTRY-136:
-----------------------------------------------
ping [~brocknoland]
> Thrift request structs should include the groupName in addition to the userName
> -------------------------------------------------------------------------------
>
> Key: SENTRY-136
> URL: https://issues.apache.org/jira/browse/SENTRY-136
> Project: Sentry
> Issue Type: Sub-task
> Reporter: Shreepadma Venugopalan
> Assignee: Shreepadma Venugopalan
> Attachments: SENTRY-136.patch
>
>
> Today, thrift request structs use the userName of the user on whose behalf the request is performed. Instead, we should include the list of groups to which the user belongs. Benefits,
> a) user-group resolution can be restricted to the client i.e., impala, hs2, solr etc and hence sentry service doesn't have to resolve the mapping.
> b) user-group mapping doesn't have to present on the node that's hosting the sentry service.
--
This message was sent by Atlassian JIRA
(v6.2#6252)