[SENTRY-1290] Performance improvement for ResourceAuthorizationProvider

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.8.0
• Assignee: Hao Hao
• Reporter: Hao Hao
• Created: 23/May/16 06:46
• Updated: 10/Jul/17 15:25
• Resolved: 27/Jul/16 20:54

Description

Currently, ResourceAuthorizationProvider.doHasAccess does not scale in the scenario when users have many roles and each role has many permissions. Especially in the case for "SHOW TABLES", "SHOW DATABASEs" in hive, which checks a lot of authorizable objects. Need to improve the performance.

Sub-Tasks

• SimpleCacheProviderBackend.getPrivileges should return the permission based on authorizationhierarchy: Resolved
• Reorder DBModelAction EnumSet: Resolved
• Avoid converting string permission to Privilege object: Resolved