[SENTRY-1217] NPE for list_sentry_privileges_by_authorizable when activeRoleSet is not set

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.7.0
• Fix Version/s: 1.7.0
• Component/s: Sentry
• Assignee: Hao Hao
• Reporter: Hao Hao
• Created: 25/Apr/16 21:43
• Updated: 26/Apr/16 04:15
• Resolved: 26/Apr/16 04:15

Description

If activeRoleSet, which is optional, is not set when the requestor is in admin group, NPE will be thrown.

16/04/25 11:17:55 ERROR thrift.SentryGenericPolicyProcessor: Unknown error for request: TListSentryPrivilegesByAuthRequest(protocol_version:2, requestorUserName:romain, component:solr, serviceName:server1, authorizablesSet:[collection->yelp_demo]), message: null
java.lang.NullPointerException
    at org.apache.sentry.provider.db.generic.service.thrift.SentryGenericPolicyProcessor.list_sentry_privileges_by_authorizable(SentryGenericPolicyProcessor.java:688)
    at org.apache.sentry.provider.db.generic.service.thrift.SentryGenericPolicyService$Processor$list_sentry_privileges_by_authorizable.getResult(SentryGenericPolicyService.java:1013)
    at org.apache.sentry.provider.db.generic.service.thrift.SentryGenericPolicyService$Processor$list_sentry_privileges_by_authorizable.getResult(SentryGenericPolicyService.java:998)
    at org.apache.thrift.ProcessFunction.process(ProcessFunction.java:39)
    at org.apache.thrift.TBaseProcessor.process(TBaseProcessor.java:39)
    at org.apache.sentry.provider.db.generic.service.thrift.SentryGenericPolicyProcessorWrapper.process(SentryGenericPolicyProcessorWrapper.java:37)
    at org.apache.thrift.TMultiplexedProcessor.process(TMultiplexedProcessor.java:123)
    at org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:285)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
    at java.lang.Thread.run(Thread.java:745)

Issue Links

• links to: Review Board Link