You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sentry.apache.org by "Sravya Tirukkovalur (JIRA)" <ji...@apache.org> on 2014/08/15 01:31:18 UTC

[jira] [Updated] (SENTRY-359) Support Sentry service API to retrieve applicable privileges for a given authorizable object

     [ https://issues.apache.org/jira/browse/SENTRY-359?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sravya Tirukkovalur updated SENTRY-359:
---------------------------------------

    Description: 
The current implementation of list_sentry_privileges_for_provider is specifically to facilitate Sentry auth engine. It's not intended to be a general purpose metadata query.
We should add a new API that returns the list of privileges (TSentryPrivilege)  for the give authorizable object and all it's applicable privileges. 

  was:
The current implementation of list_sentry_privileges_for_provider is specifically to facilitate Sentry auth engine. It's not intended to be a general purpose metadata query.
We should add a new API that returns the list of privileges (TSentryPrivilege)  for the give authorizable object and all it's child objects. 
An initial implementation could limit itself to one level of hierarchy (eg when you query a database object, return the tables along with it).

        Summary: Support Sentry service API to retrieve applicable privileges for a given authorizable object  (was: Support Sentry service API to retrieve privilege hierarchy of the given authorizable object)

> Support Sentry service API to retrieve applicable privileges for a given authorizable object
> --------------------------------------------------------------------------------------------
>
>                 Key: SENTRY-359
>                 URL: https://issues.apache.org/jira/browse/SENTRY-359
>             Project: Sentry
>          Issue Type: Improvement
>    Affects Versions: 1.4.0
>            Reporter: Prasad Mujumdar
>
> The current implementation of list_sentry_privileges_for_provider is specifically to facilitate Sentry auth engine. It's not intended to be a general purpose metadata query.
> We should add a new API that returns the list of privileges (TSentryPrivilege)  for the give authorizable object and all it's applicable privileges. 



--
This message was sent by Atlassian JIRA
(v6.2#6252)