Integrating Sentry with external processing engines

[rohit sinha <ta...@gmail.com>]

Hello,

I am working on integrating Sentry with an under development data
processing engine and had few question regarding the integration.

1. After looking into current integrations I understand I need to develop
three modules: Model, Binding and Processing engine. I want to build these
jars under our project for current testing purpose rather than in Sentry
repo. Can sentry work with external jars for these modules and if yes, then
how to make sentry aware of them ?

2. I am assuming that packaging the above three modules in a single jar
should be enough. Do I need to package them in three separate jars ?

3. The model defines authorizable entities and action allowed on them. Is
it possible to define different action for individual entities ?

4. I see that the current release is 1.6rc0 and 1.7 is under development.
Do you have any expected timeframe for 1.7 release ?

Any help with these questions will be highly appreciated.

Thanks.

Re: Integrating Sentry with external processing engines

[Sravya Tirukkovalur <sr...@cloudera.com>]

Hi Rohit,

Please see answers inline.

On Sun, Feb 28, 2016 at 10:39 AM, rohit sinha <ta...@gmail.com>
wrote:

> Hello,
>
> I am working on integrating Sentry with an under development data
> processing engine and had few question regarding the integration.
>
> 1. After looking into current integrations I understand I need to develop
> three modules: Model, Binding and Processing engine. I want to build these
> jars under our project for current testing purpose rather than in Sentry
> repo. Can sentry work with external jars for these modules and if yes, then
> how to make sentry aware of them ?

Sentry uses HADOOP_CLASSPATH, so you can add the locations of the jars to
this.

>
>
2. I am assuming that packaging the above three modules in a single jar
> should be enough. Do I need to package them in three separate jars ?
>
> You can have it in the same jar as long as it is available to both binding
and sentry.

> 3. The model defines authorizable entities and action allowed on them. Is
> it possible to define different action for individual entities ?
>
> Today, this is possible to achieve in the binding code. See hive binding
for example. Might be a good feature improvement to support it in the model
itself.


> 4. I see that the current release is 1.6rc0 and 1.7 is under development.
> Do you have any expected timeframe for 1.7 release ?
>
> Thanks for your interest! I see that community is discussing the 1.7.0
release, but I do not see a time frame yet on that thread. Feel free to
comment on that thread on when do you need it.

> Any help with these questions will be highly appreciated.
>
> Thanks.
>



-- 
Sravya Tirukkovalur