You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sentry.apache.org by Jan Hentschel <ja...@ultratendency.com> on 2016/12/03 11:16:32 UTC

Show groups for a given role

Hi,

 

I’m looking for a way to look up the access groups for a given role. I know that I can list all the roles for a given group via

 

SHOW ROLE GRANT GROUP <groupName>;

 

What I want to do is something vice versa without directly querying the Sentry database. Is there a command or JIRA ticket for this?

 

Best, Jan

Re: Show groups for a given role

Posted by Jan Hentschel <ja...@ultratendency.com>.
@Alex Thanks for the information. Unfortunately, we have several clusters running Kerberos. I opened SENTRY-1558 for this and will work on it with a colleague of mine.

 

Best, Jan

 

From: Alexander Kolbasov <ak...@cloudera.com>
Reply-To: <de...@sentry.apache.org>
Date: Saturday, December 3, 2016 at 7:46 PM
To: <de...@sentry.apache.org>
Subject: Re: Show groups for a given role

 

Hi Jan,

 

You may check my new sentry command-line tool at https://github.com/akolb1/sentrytool <https://github.com/akolb1/sentrytool>. You can easily do it with this tool:

 

sentrytool group list -v <groupName>

 

Caveat - it doesn’t work in Kerberos setup.

 

I am not sure whether there is a more “official” way of doing that. There is a Sentry Shell which might be able to do something similar.

 

Best,

 

- Alex

 

On Dec 3, 2016, at 3:16 AM, Jan Hentschel <ja...@ultratendency.com> wrote:

Hi,

I’m looking for a way to look up the access groups for a given role. I know that I can list all the roles for a given group via

SHOW ROLE GRANT GROUP <groupName>;

What I want to do is something vice versa without directly querying the Sentry database. Is there a command or JIRA ticket for this?

Best, Jan

Re: Show groups for a given role

Posted by Alexander Kolbasov <ak...@cloudera.com>.
Hi Jan,

You may check my new sentry command-line tool at https://github.com/akolb1/sentrytool <https://github.com/akolb1/sentrytool>. You can easily do it with this tool:

sentrytool group list -v <groupName>

Caveat - it doesn’t work in Kerberos setup.

I am not sure whether there is a more “official” way of doing that. There is a Sentry Shell which might be able to do something similar.

Best,

- Alex

> On Dec 3, 2016, at 3:16 AM, Jan Hentschel <ja...@ultratendency.com> wrote:
> 
> Hi,
> 
> 
> 
> I’m looking for a way to look up the access groups for a given role. I know that I can list all the roles for a given group via
> 
> 
> 
> SHOW ROLE GRANT GROUP <groupName>;
> 
> 
> 
> What I want to do is something vice versa without directly querying the Sentry database. Is there a command or JIRA ticket for this?
> 
> 
> 
> Best, Jan 
> 
> 
>