You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sentry.apache.org by "Schena, Brendan" <Br...@fmr.com> on 2014/02/11 15:16:16 UTC
Response to (SENTRY-116)
I appreciate your response. Would the enforcement work if it were done in HCatalog as this is used by Pig to connect to the Hive Metastore.
Prasad Mujumdar commented on SENTRY-116:
----------------------------------------
[~bayroot22] Thanks for your interest in Apache Sentry. At this point Apache Pig only support the embedded (thick) client mode. The client can't be expected to self authorize access to data. You really need a server proxy in order to support true role base authorization. Without a server support in Pig it's not possible to support Sentry authorization for Pig.
Also in future, please feel free to email questions to dev@sentry.incubator.apache.org<ma...@sentry.incubator.apache.org>. You don't need to take all the trouble of creating a ticket for that.
Are there any plans to include Sentry bindings for PIG like HIVE and Impala?
Re: Response to (SENTRY-116)
Posted by Brock Noland <br...@cloudera.com>.
Hi,
The problem is that HCatalog doesn't execute PIG queries on the Pig users
behalf. To implement this I think we'd either need a "PIg Server" (similar
to HS2) or to implement Sentry at the MR level.
Brock
On Tue, Feb 11, 2014 at 8:16 AM, Schena, Brendan <Br...@fmr.com>wrote:
> I appreciate your response. Would the enforcement work if it were done in
> HCatalog as this is used by Pig to connect to the Hive Metastore.
>
>
> Prasad Mujumdar commented on SENTRY-116:
>
> ----------------------------------------
>
>
>
> [~bayroot22] Thanks for your interest in Apache Sentry. At this point
> Apache Pig only support the embedded (thick) client mode. The client can't
> be expected to self authorize access to data. You really need a server
> proxy in order to support true role base authorization. Without a server
> support in Pig it's not possible to support Sentry authorization for Pig.
>
>
>
> Also in future, please feel free to email questions to
> dev@sentry.incubator.apache.org<ma...@sentry.incubator.apache.org>.
> You don't need to take all the trouble of creating a ticket for that.
>
>
>
> Are there any plans to include Sentry bindings for PIG like HIVE and
> Impala?
>
>
--
Apache MRUnit - Unit testing MapReduce - http://mrunit.apache.org