[SENTRY-939] Provide a configuration to be able to fall back to orginal HDFS user:group when NN has stale sentry permissions

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.4.0
• Assignee: Unassigned
• Reporter: Sravya Tirukkovalur
• Created: 29/Oct/15 02:33
• Updated: 13/Sep/18 17:04

Description

Seems like some sentry users have a batch id for each application which creates the directory, ingests the data, then creates a table/partition over it. So the batch id is the the original owner of this directory.

When NN has stale permissions during the time it cannot talk to Sentry (if sentry is down), falling back to hive:hive blocks everyone it would be helpful if at least this batch id has access otherwise ingest pipelines may break during this time. So would be helpful to provide a way to configure this behavior.

• This does not entail ACLS.
• We should add hive:hive as acl to make sure hive has access