[IMPALA-3371] Improve robustness and error messaging of the Impala-Sentry sync operations

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: Impala 2.2
• Component/s: Catalog
• Labels: newbie security supportability
• Target Version: Product Backlog
• Assignee: Unassigned
• Reporter: David Karoly
• Created: 18/Apr/16 13:43
• Updated: 14/May/20 18:12
• Resolved: 14/May/20 18:12

Description

If listRolePrivileges fails for one of the roles, catalogd will stop syncing permissions from Sentry.
We only get error message 'Error refreshing Sentry policy' from which it is not really obvious what is happening so either the error message should be clearer or it should be documented that this error message indicates that impala permissions became out of sync with Sentry.