You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@sentry.apache.org by "Sergio Peña (JIRA)" <ji...@apache.org> on 2018/12/18 15:59:00 UTC

[jira] [Created] (SENTRY-2481) Filter HMS server-side objects based on HMS user authorization

Sergio Peña created SENTRY-2481:
-----------------------------------

             Summary: Filter HMS server-side objects based on HMS user authorization
                 Key: SENTRY-2481
                 URL: https://issues.apache.org/jira/browse/SENTRY-2481
             Project: Sentry
          Issue Type: New Feature
          Components: Sentry
            Reporter: Sergio Peña


Sentry provides a mechanism to filter HMS objects from users who are not authorized to view certain objects, but this filter happens on the HMS client only. The support for the HMS server-side is needed as there might clients who access the server using Thrift API causing this security concern.

 

To provide with such support. Sentry should re-use the SentryMetaStoreFilterHook, which will be called by the HMS server, in order to filter the unwanted objects.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)