You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@sentry.apache.org by "Arjun Mishra (JIRA)" <ji...@apache.org> on 2018/01/11 00:59:10 UTC

[jira] [Comment Edited] (SENTRY-2121) Notifications processed during times when HDFS sync is disabled will not be applied as ACLs when later HDFS sync was to be enabled

    [ https://issues.apache.org/jira/browse/SENTRY-2121?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16321479#comment-16321479 ] 

Arjun Mishra edited comment on SENTRY-2121 at 1/11/18 12:58 AM:
----------------------------------------------------------------

We have more than 2 options. What about checking the state of AUTHZ_PATHS_MAPPING table to see if it is in sync with SENTRY_PATH_CHANGE or not? Another option is to always trigger a full snapshot every time HDFS sync is enabled without touching AUTHZ_PATHS_SNAPSHOT_ID table. 


was (Author: arjunmishra13):
We have more than 2 options. What about checking the state of AUTHZ_PATHS_MAPPING table to see if it is in sync with SENTRY_PATH_CHANGE or not? Another option is to always trigger a full snapshot every time HDFS sync is enabled. 

> Notifications processed during times when HDFS sync is disabled will not be applied as ACLs when later HDFS sync was to be enabled
> ----------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: SENTRY-2121
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2121
>             Project: Sentry
>          Issue Type: Bug
>          Components: Sentry
>    Affects Versions: 2.1.0
>            Reporter: Arjun Mishra
>            Assignee: Arjun Mishra
>              Labels: triaged
>
> When HDFS sync is disabled, we don't update the AUTHZ_PATHS_MAPPING table. However, when HDFS sync is enabled, ACLs that are generated are based on entries in the AUTHZ_PATHS_MAPPING table. So this means that if we were to disable HDFS sync and later enable HDFS sync, ACLs for all notifications that were processed during the times when HDFS sycn was disabled won't be created



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)