[jira] [Commented] (SENTRY-327) Support auth admin delegation via SQL construct 'with grant option'

["Prasad Mujumdar (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SENTRY-327?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14067247#comment-14067247 ] 

Prasad Mujumdar commented on SENTRY-327:
----------------------------------------

Thanks for the detailed design document. Overall looks fine me. A minor questions/comments below -
- The flowchart, has a step "Get grantorRole from database". I believe this would require extracting all the granted privileges for the grantor principal. (eg by calling listSentryPrivilegesForProvider) ?



> Support auth admin delegation via SQL construct 'with grant option' 
> --------------------------------------------------------------------
>
>                 Key: SENTRY-327
>                 URL: https://issues.apache.org/jira/browse/SENTRY-327
>             Project: Sentry
>          Issue Type: Improvement
>    Affects Versions: 1.4.0
>            Reporter: Prasad Mujumdar
>            Assignee: Xiaomeng Huang
>         Attachments: Design Document of With Grant Option_v1.pdf
>
>
> Currently the authorization admins are created statically by setting a config property. Sentry should support admin delegation via 'with grant option' statement.



--
This message was sent by Atlassian JIRA
(v6.2#6252)