Description
With the new object ownership and fine grained privileges added to sentry, there will be implicit privileges added to the owner of the HMS Object. This could happen when the objects are created OR when the ownership is changed.
Owner could be a user/role.
When ever these implicit privileges are created/deleted, HDFS ACL's should be updated accordingly.
Make sure that sentry HDFS ACL's are updated on below listed scenario's.
- When ownership is changed from a user to a role
- When ownership is changed from one role to another.