You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sentry.apache.org by "Dapeng Sun (JIRA)" <ji...@apache.org> on 2014/11/10 03:46:34 UTC

[jira] [Commented] (SENTRY-432) Synchronization of HDFS permissions with Sentry permissions

    [ https://issues.apache.org/jira/browse/SENTRY-432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14204260#comment-14204260 ] 

Dapeng Sun commented on SENTRY-432:
-----------------------------------

Hi [~asuresh] 
I checkout the source code in branch {{sentry-hdfs-plugin}},I found two issues may block the branch build. Here is my {{git diff}}
{noformat}
diff --git a/sentry-hdfs/sentry-hdfs-common/src/main/resources/sentry_hdfs_service.thrift b/sentry-hdfs/sentry-hdfs-common/src/main/resources/sentry_hdfs_service.thrift
index 9212b64..fb60855 100644
--- a/sentry-hdfs/sentry-hdfs-common/src/main/resources/sentry_hdfs_service.thrift
+++ b/sentry-hdfs/sentry-hdfs-common/src/main/resources/sentry_hdfs_service.thrift
@@ -81,7 +81,7 @@ service SentryHDFSService
 {
   # HMS Path cache
   void handle_hms_notification(1:TPathsUpdate pathsUpdate);
-
+  i64 check_hms_seq_num(1:i64 pathSeqNum);
   TAuthzUpdateResponse get_all_authz_updates_from(1:i64 permSeqNum, 2:i64 pathSeqNum);
   map<string, list<string>> get_all_related_paths(1:string path, 2:bool exactMatch);
 }
diff --git a/sentry-hdfs/sentry-hdfs-namenode-plugin/pom.xml b/sentry-hdfs/sentry-hdfs-namenode-plugin/pom.xml
index 4e5f6b0..a1b5a24 100644
--- a/sentry-hdfs/sentry-hdfs-namenode-plugin/pom.xml
+++ b/sentry-hdfs/sentry-hdfs-namenode-plugin/pom.xml
@@ -36,11 +36,6 @@ limitations under the License.
     </dependency>
     <dependency>
       <groupId>org.apache.sentry</groupId>
-      <artifactId>sentry-service-client</artifactId>
-      <version>1.5.0-incubating-SNAPSHOT</version>
-    </dependency>
-    <dependency>
-      <groupId>org.apache.sentry</groupId>
       <artifactId>sentry-hdfs-service</artifactId>
       <version>1.5.0-incubating-SNAPSHOT</version>
     </dependency>
{noformat}

> Synchronization of HDFS permissions with Sentry permissions
> -----------------------------------------------------------
>
>                 Key: SENTRY-432
>                 URL: https://issues.apache.org/jira/browse/SENTRY-432
>             Project: Sentry
>          Issue Type: Bug
>            Reporter: Arun Suresh
>            Assignee: Arun Suresh
>              Labels: sentry-hdfs
>         Attachments: sentry-hdfs-v1.pdf, sentry_hdfs.patch
>
>
> An HDFS file or directory that is associated with an Authorizable Object managed by Sentry (Such as a HiveMetaStore table partition, a Solr/Search collection/document or an HBase Table etc.) should have the permissions that reflect those that were granted/revoked via Sentry. 
> This logic should be enforced by a Sentry Authorization Plugin which would be an implementation of the HDFS AuthorizationProvider as described in [HDFS-6826|https://issues.apache.org/jira/browse/HDFS-6826]
> This is an umbrella JIRA



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)