You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@sentry.apache.org by "Sergio Peña (JIRA)" <ji...@apache.org> on 2018/06/18 22:42:00 UTC
[jira] [Commented] (SENTRY-2265) Translate owner privilege in
sentry binding for authorization
[ https://issues.apache.org/jira/browse/SENTRY-2265?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16516436#comment-16516436 ]
Sergio Peña commented on SENTRY-2265:
-------------------------------------
[~kkalyan] Can you review?
> Translate owner privilege in sentry binding for authorization
> -------------------------------------------------------------
>
> Key: SENTRY-2265
> URL: https://issues.apache.org/jira/browse/SENTRY-2265
> Project: Sentry
> Issue Type: Sub-task
> Components: Sentry
> Reporter: kalyan kumar kalvagadda
> Assignee: Sergio Peña
> Priority: Major
> Attachments: SENTRY-2265.1.patch
>
>
> When authorization is done, sentry binding should translate owner privilege to "ALL" before using it.
> In CommonPrivilege, need to add Owner privilege and treat it as ALL privilege for authorization
> {code}
> private boolean impliesResource(ImplyMethodType implyMethodType, String policyValue, String requestValue) {
> // wildcard support, "*", "+", "all"("+" and "all" are for backward compatibility) are represented as wildcard
> // if requestValue is wildcard, means privilege request is to match with any value of given resource
> if (SentryConstants.RESOURCE_WILDCARD_VALUE.equals(policyValue)
> || SentryConstants.RESOURCE_WILDCARD_VALUE.equals(requestValue)
> || SentryConstants.RESOURCE_WILDCARD_VALUE_ALL.equalsIgnoreCase(policyValue)
> || SentryConstants.RESOURCE_WILDCARD_VALUE_ALL.equalsIgnoreCase(requestValue)
> || SentryConstants.RESOURCE_WILDCARD_VALUE_SOME.equals(requestValue)) {
> return true;
> }
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)