[SENTRY-2141] Sentry Privilege TimeStamp is not converted to grantTime in HivePrivilegeInfo correctly

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0, 2.1.0
• Fix Version/s: 2.2.0
• Assignee: Na Li
• Reporter: Na Li
• Created: 14/Feb/18 00:29
• Updated: 02/Jan/20 17:07
• Resolved: 20/Feb/18 22:36

Description

since hive is using second as time unit and the variable holding the time is "int", sentry should convert the time from millisecond to second and cast to int. Previous code just cast the long value as time in milliseconds to int as time in seconds, which runs into overflows (because a Long can store a wider range than an Integer), and changes the meaning of the value.

Correct behavior:

int hiveCreateTime = (int)TimeUnit.SECONDS.convert(tPrivilege.getCreateTime(),
TimeUnit.MILLISECONDS);

return new HivePrivilegeInfo(principal, hivePrivilege, hivePrivilegeObject, grantor,
grantOption, hiveCreateTime);

Wrong behavior:

(int) tPrivilege.getCreateTime()

The original code just cast the timestamp from long to int without converting milliseconds to seconds. Therefore, the timestamp value is wrong when retrieving the privilege from hive.

The solution is to convert the time correctly.

Issue Links

• links to: Review Link for this case