[jira] [Created] (SENTRY-560) Sentry HDFS Syncup applies duplicate ACLs for the same scope, group and type

["Arun Suresh (JIRA)" <ji...@apache.org>]

Arun Suresh created SENTRY-560:
----------------------------------

             Summary: Sentry HDFS Syncup applies duplicate ACLs for the same scope, group and type
                 Key: SENTRY-560
                 URL: https://issues.apache.org/jira/browse/SENTRY-560
             Project: Sentry
          Issue Type: Bug
    Affects Versions: 1.5.0
            Reporter: Arun Suresh
            Assignee: Arun Suresh


If Sentry HDFS is turned on, check sample_table. The permission looks like this,

{noformat}
[root@x-sentry-1 ~]# hdfs dfs -getfacl /user/hive/warehouse/sample_table
file: /user/hive/warehouse/sample_table
owner: hive
group: hive
user::rwx
user:hive:rwx
group:hive:rwx
other::---
group:systest:rwx
group:sentryDefaultAdmin:rwx
mask::rwx
other::--x
{noformat}

Notice, there are two "other::-" and "other::-x". If turn off this feature, using setfacl, it will return errors,
setfacl: Invalid ACL: multiple entries with same scope, type and name.




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)