[jira] [Updated] (SENTRY-2323) Audit log to understand the changes to path and permission information in Sentry namenode-plugin

["kalyan kumar kalvagadda (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SENTRY-2323?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

kalyan kumar kalvagadda updated SENTRY-2323:
--------------------------------------------
    Description: 
Currently we do not have any clue on what’s going on with the ACL information in Sentry namenode plug-in.
 *Solution:* To understand the changes happening to HDFS ACL’s, sentry could use the current HDFS audit logging to log the ACL changes and event that triggered the change.
 # Permission grants and event that caused it.
 ** Let’s take an example: READ permission granted on /user/hive/warehouse/x/y/z to groups group1, group2.. etc Event: Explicit Grant
 # Permission revoke and the event that caused it.
 ** Let’s take an example:
 READ permission removed from /user/hive/warehouse/x/y/z to groups group1, group2.. etc Event: Explicit Revoke.
 READ/WRITE permissions removed from /user/hive/warehouse/x/y/z to groups group1, group2.. etc Event: Explicit File removed.
 ** Permission change because of changes to roles is not possible to show as the data would be huge.

  was:
Currently we do not have any clue on what’s going on with the ACL information in Sentry namenode plug-in.
*Solution: *To understand the changes happening to HDFS ACL’s, sentry could use the current HDFS audit logging to log the ACL changes and event that triggered the change.
# Permission grants and event that caused it.
** Let’s take an example: READ permission granted on /user/hive/warehouse/x/y/z to groups group1, group2.. etc Event: Explicit Grant
# Permission revoke and the event that caused it.
** Let’s take an example:
READ permission removed from /user/hive/warehouse/x/y/z to groups group1, group2.. etc Event: Explicit Revoke.
READ/WRITE permissions removed from /user/hive/warehouse/x/y/z to groups group1, group2.. etc Event: Explicit File removed.
** Permission change because of changes to roles is not possible to show as the data would be huge.



> Audit log to understand the changes to path and permission information in Sentry namenode-plugin
> ------------------------------------------------------------------------------------------------
>
>                 Key: SENTRY-2323
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2323
>             Project: Sentry
>          Issue Type: Sub-task
>          Components: Sentry
>    Affects Versions: 2.1.0
>            Reporter: kalyan kumar kalvagadda
>            Assignee: Arjun Mishra
>            Priority: Major
>
> Currently we do not have any clue on what’s going on with the ACL information in Sentry namenode plug-in.
>  *Solution:* To understand the changes happening to HDFS ACL’s, sentry could use the current HDFS audit logging to log the ACL changes and event that triggered the change.
>  # Permission grants and event that caused it.
>  ** Let’s take an example: READ permission granted on /user/hive/warehouse/x/y/z to groups group1, group2.. etc Event: Explicit Grant
>  # Permission revoke and the event that caused it.
>  ** Let’s take an example:
>  READ permission removed from /user/hive/warehouse/x/y/z to groups group1, group2.. etc Event: Explicit Revoke.
>  READ/WRITE permissions removed from /user/hive/warehouse/x/y/z to groups group1, group2.. etc Event: Explicit File removed.
>  ** Permission change because of changes to roles is not possible to show as the data would be huge.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)