[KUDU-428] fine-grained authorization through Sentry integration

• Type: New Feature
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.2.0
• Fix Version/s: 1.10.0
• Component/s: master, security, tserver
• Labels: roadmap-candidate
• Target Version/s: 1.10.0
• Assignee: Hao Hao
• Reporter: Todd Lipcon
• Created: 31/Jul/14 13:07
• Updated: 09/Jul/19 00:37
• Resolved: 09/Jul/19 00:37

Description

We need to support basic SQL-like access control:

• grant/revoke on tables, columns
• service-level grant/revoke
• probably need some group/role mapping infrastructure as well

Issue Links

• relates to: KUDU-2729 Consider refreshing authorization metadata upon altering tables
• links to: design document

Sub-Tasks

• server-side Sentry Client: Resolved
• Fill-out AuthzToken definition: Resolved
• client authorization token support: Resolved
• Master access control enforcement of CREATE/ALTER/DROP table operations: Resolved