You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@impala.apache.org by "Joe McDonnell (JIRA)" <ji...@apache.org> on 2017/09/12 23:14:00 UTC

[jira] [Created] (IMPALA-5925) Impala must support Sentry 2.0

Joe McDonnell created IMPALA-5925:
-------------------------------------

             Summary: Impala must support Sentry 2.0
                 Key: IMPALA-5925
                 URL: https://issues.apache.org/jira/browse/IMPALA-5925
             Project: IMPALA
          Issue Type: Bug
          Components: Frontend
    Affects Versions: Impala 2.11.0
            Reporter: Joe McDonnell
            Assignee: Joe McDonnell


Sentry 2.0 changed some Java code that Impala uses and will require changes to support Sentry 2.0. Specifically:

1. sentry.policy.db has been replaced by sentry.policy.engine. These classes changed names:
org.apache.sentry.policy.db.SimpleDBPolicyEngine changed to org.apache.sentry.policy.engine.common.CommonPolicyEngine
The name of the jar also changed from sentry-policy-db to sentry-policy-engine.

2. Some exceptions moved from sentry.provider.db to sentry.core.common:
org.apache.sentry.provider.db.SentryAccessDeniedException changed to org.apache.sentry.core.common.exception.SentryAccessDeniedException
org.apache.sentry.provider.db.SentryAlreadyExistsException changed to org.apache.sentry.core.common.exception.SentryAlreadyExistsException

3. Sentry binding hive changed to version 2
Specifically, the sentry-binding-hive jar has changed to sentry-binding-hive-v2

4. org.apache.sentry.provider.cache.PrivilegeCache adds new signatures for listPrivileges that Impala may need to implement in AuthorizationPolicy.java

Specifically:
Set<String> listPrivileges(Set<String> groups, Set<String> users,
      ActiveRoleSet roleSet);
Set<String> listPrivileges(Set<String> groups, Set<String> users, ActiveRoleSet roleSet,
      Authorizable... authorizationhierarchy);



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)