[jira] [Commented] (SENTRY-2284) Add two client API to get all roles or users privileges mapping

["Todd Lipcon (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SENTRY-2284?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16537673#comment-16537673 ] 

Todd Lipcon commented on SENTRY-2284:
-------------------------------------

What are the expected scalability limits for these dimensions in the sentry DB? I'm worried that in a large deployment there may be enough roles/privileges such that this single API call response would be too large to transfer in a single RPC. For example, if a user has millions of tables, would we end up with a cross product of roles and tables trying to be presented in this map which ends up being multiple GB?

> Add two client API to get all roles or users privileges mapping
> ---------------------------------------------------------------
>
>                 Key: SENTRY-2284
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2284
>             Project: Sentry
>          Issue Type: Improvement
>          Components: Sentry
>    Affects Versions: 2.1.0
>            Reporter: Sergio Peña
>            Assignee: Sergio Peña
>            Priority: Major
>             Fix For: 2.1.0
>
>         Attachments: SENTRY-2284.1.patch, SENTRY-2284.2.patch
>
>
> Add two new API methods to the Sentry client to return all roles and their privileges or all users and privileges in a map object.
> This is useful for components like Impala that keep a cache of all roles, users and privileges on their side.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)