Details
-
Sub-task
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
1.8.0
-
None
Description
Create CommonPrivilege for every component.
The main change is for the interface Privilege, implies(Privilege p) ---> implies(Privilege privilege, Map<String, String> implyMethodMap, Map<String, Integer> actionMap)
The actionMap is stored the mapping between action name and action value, eg:
for Hive: select ---> 1 (binary: 0000001)
insert ---> 3 (binary: 0000011)
create ---> 4 (binary: 0000100)
all ---> 7 (binary: 0000111)
when compare the action, use the action value with the & operator
The implyMethodMap is stored the mapping between resource type and imply method, eg:
for Hive: db ---> string (imply as string value)
url ---> url (imply as url value)
Attachments
Attachments
Issue Links
- is duplicated by
-
SENTRY-1051 The policy Privilege implementations could be consolidated
- Closed
- links to