[SENTRY-2134] Apply Hive URI grants recursively to subdirectories (like in Ranger)

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.8.0, 2.0.0, 1.7.1
• Component/s: Hive Binding
• Labels: hive uri
• Assignee: Unassigned
• Reporter: Ruslan Dautkhanov
• Created: 29/Jan/18 18:09
• Updated: 16/May/18 17:17

Description

Currently we need to add direct grants for all Hive tables' LOCATIONs.

Like, 'hdfs_staging/table1', 'hdfs_staging/table2', etc..

It's not manageable this way. - we can't add grants for each and every table.

It would be great if we could just do one grant -

'hdfs_staging/' so it would automatically be applied to 'hdfs_staging/table1', 'hdfs_staging/table2', and other subdirectories.

There is probably a reason this wasn't implemented earlier? Thanks for considering this improvement.

Also found another user's request on this -
https://community.cloudera.com/t5/Interactive-Short-cycle-SQL/Impala-Sentry-GRANT-ALL-ON-URI-not-cascaded-down-through/td-p/39928