Uploaded image for project: 'Sentry'
  1. Sentry
  2. SENTRY-1563

sentry.service.allow.connect property should support groups

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Service
    • Labels:
      None

      Description

      With the introduction of Sentry Service for Kafka and Solr, Sentry service is now accessed directly by admin users (though the Sentry Shell CLI for Solr and Kafka) rather than through HS2 or Impala. For this to work admin users have to be configured in sentry.service.allow.connect. This is not scalable as he admins are added or deleted, the Sentry service need to be reconfigured and restarted. We suggest that a this property accepts both groups and users like other Hadoop ACLs.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              mkazia Mubashir Kazia
            • Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: