You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@sentry.apache.org by "kalyan kumar kalvagadda (JIRA)" <ji...@apache.org> on 2017/02/16 14:23:41 UTC

[jira] [Commented] (SENTRY-1556) Simplify privilege cleaning

    [ https://issues.apache.org/jira/browse/SENTRY-1556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15870009#comment-15870009 ] 

kalyan kumar kalvagadda commented on SENTRY-1556:
-------------------------------------------------

I have addressed the review comments and updated the latest path with the latest master.

> Simplify privilege cleaning
> ---------------------------
>
>                 Key: SENTRY-1556
>                 URL: https://issues.apache.org/jira/browse/SENTRY-1556
>             Project: Sentry
>          Issue Type: Improvement
>          Components: Sentry
>    Affects Versions: 1.8.0, sentry-ha-redesign
>            Reporter: Alexander Kolbasov
>            Assignee: kalyan kumar kalvagadda
>            Priority: Minor
>         Attachments: SENTRY-1556.002.patch, SENTRY-1556.003.patch, SENTRY-1556.004.patch
>
>
> The SentryStore class has a privCleaner that cleans up orphaned privileges. Currently cleaning is happening after 50 notification requests are sent and it uses locking to synchronize.
> I think the whole thing can be simplified:
> 1) We should consider whether it is possible to clean up a privilege simply when we see that there are no roles associated with it. In this case we do not need this at all.
> 2) We can simply run a periodic job to clean up orphaned privileges and groups (which are not cleaned up at all now).



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)