You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@sentry.apache.org by "Arjun Mishra (JIRA)" <ji...@apache.org> on 2018/05/14 13:51:00 UTC
[jira] [Updated] (SENTRY-2231) Fix URI check on List Privileges by
Provider in SentryStore
[ https://issues.apache.org/jira/browse/SENTRY-2231?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Arjun Mishra updated SENTRY-2231:
---------------------------------
Description:
In SentryStore#getMSentryPrivileges when retrieving URI's the query condition "addCustomParam("\"" + authHierarchy.getUri() + "\".startsWith(:URI)", URI, authHierarchy.getUri());", will always be True. This should be changed to filter by appropriate URI.
For example: when retrieving privileges on URI object "/x/y/z" this condition is checked for: ""file:///x/y/z".startsWith(file:///x/y/z))", which is always true
was:In SentryStore#getMSentryPrivileges when retrieving URI's the query condition "addCustomParam("\"" + authHierarchy.getUri() + "\".startsWith(:URI)", URI, authHierarchy.getUri());", will always be True. This should be changed to filter by appropriate URI
> Fix URI check on List Privileges by Provider in SentryStore
> -----------------------------------------------------------
>
> Key: SENTRY-2231
> URL: https://issues.apache.org/jira/browse/SENTRY-2231
> Project: Sentry
> Issue Type: Bug
> Components: Sentry
> Affects Versions: 2.1.0
> Reporter: Arjun Mishra
> Assignee: Arjun Mishra
> Priority: Major
> Fix For: 2.0.0
>
>
> In SentryStore#getMSentryPrivileges when retrieving URI's the query condition "addCustomParam("\"" + authHierarchy.getUri() + "\".startsWith(:URI)", URI, authHierarchy.getUri());", will always be True. This should be changed to filter by appropriate URI.
> For example: when retrieving privileges on URI object "/x/y/z" this condition is checked for: ""file:///x/y/z".startsWith(file:///x/y/z))", which is always true
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)