You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@sentry.apache.org by "Sergio Peña (JIRA)" <ji...@apache.org> on 2018/08/09 14:16:00 UTC

[jira] [Commented] (SENTRY-2169) Make sure that the implicit privileges for a role are synced with HDFS

    [ https://issues.apache.org/jira/browse/SENTRY-2169?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16574888#comment-16574888 ] 

Sergio Peña commented on SENTRY-2169:
-------------------------------------

[~kkalyan]  is there some work required for this?

> Make sure that the implicit privileges for a role are synced with HDFS
> ----------------------------------------------------------------------
>
>                 Key: SENTRY-2169
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2169
>             Project: Sentry
>          Issue Type: Sub-task
>          Components: Sentry
>    Affects Versions: 2.1.0
>            Reporter: kalyan kumar kalvagadda
>            Assignee: kalyan kumar kalvagadda
>            Priority: Major
>             Fix For: 2.1.0
>
>
> With the new object ownership and fine grained privileges added to sentry, there will be implicit privileges added to the owner of the HMS Object. This could happen when the objects are created OR when the ownership is changed.
> Owner could be a user/role.
> When ever these implicit privileges are created/deleted, HDFS ACL's should be updated accordingly.
> Make sure that sentry HDFS ACL's are updated on below listed scenario's.
>  # When ownership is changed from a user to a role
>  # When ownership is changed from one role to another.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)