You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@sentry.apache.org by "Hadoop QA (JIRA)" <ji...@apache.org> on 2017/10/27 05:24:00 UTC

[jira] [Commented] (SENTRY-2021) MR session ACLs in Hive binding does not handle all types of ACLs

    [ https://issues.apache.org/jira/browse/SENTRY-2021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16221725#comment-16221725 ] 

Hadoop QA commented on SENTRY-2021:
-----------------------------------

Here are the results of testing the latest attachment
https://issues.apache.org/jira/secure/attachment/12894272/SENTRY-2021.001.patch against master.

{color:red}Overall:{color} -1 due to 7 errors

{color:red}ERROR:{color} mvn test exited 1
{color:red}ERROR:{color} Failed: org.apache.sentry.tests.e2e.dbprovider.TestDbPrivilegeCleanupOnDrop
{color:red}ERROR:{color} Failed: org.apache.sentry.tests.e2e.dbprovider.TestDbPrivilegeCleanupOnDrop
{color:red}ERROR:{color} Failed: org.apache.sentry.tests.e2e.dbprovider.TestDbPrivilegeCleanupOnDrop
{color:red}ERROR:{color} Failed: org.apache.sentry.tests.e2e.dbprovider.TestDbPrivilegeCleanupOnDrop
{color:red}ERROR:{color} Failed: org.apache.sentry.tests.e2e.dbprovider.TestDbPrivilegeCleanupOnDrop
{color:red}ERROR:{color} Failed: org.apache.sentry.tests.e2e.hive.TestUserManagement

Console output: https://builds.apache.org/job/PreCommit-SENTRY-Build/3383/console

This message is automatically generated.

> MR session ACLs in Hive binding does not handle all types of ACLs
> -----------------------------------------------------------------
>
>                 Key: SENTRY-2021
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2021
>             Project: Sentry
>          Issue Type: Bug
>          Components: Hive Binding
>    Affects Versions: 1.8.0
>            Reporter: Wilfred Spiegelenburg
>         Attachments: SENTRY-2021.001.patch
>
>
> When an ACL is configured to only have groups and no users the ACL starts with a space.
> The ACL that is read from the config currently gets trimmed which removes the space and thus converts the groups into users.
> We should not trim the space from the ACL and merge the user name correctly:
> - if the ACL starts with a space just add the username to the start
> - if the ACL does not start with a space add the username separated by a comma
> The change was introduced by SENTRY-158.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)