Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
Description
With the introduction of Sentry Service for Kafka and Solr, Sentry service is now accessed directly by admin users (though the Sentry Shell CLI for Solr and Kafka) rather than through HS2 or Impala. For this to work admin users have to be configured in sentry.service.allow.connect. This is not scalable as he admins are added or deleted, the Sentry service need to be reconfigured and restarted. We suggest that a this property accepts both groups and users like other Hadoop ACLs.