[SENTRY-2468] Replicate owner privileges.

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.2.0
• Component/s: Sentry
• Assignee: Krishna Kalyan
• Reporter: Krishna Kalyan
• Created: 29/Nov/18 21:42
• Updated: 07/Dec/18 15:47
• Resolved: 07/Dec/18 15:47

Description

In general exporting owner privileges is an unnecessary overhead for couple of reasons

1. Owner privileges are updated automatically in the target cluster when Hive replication is performed on the target cluster.
2. Number of owner privileges could be huge and the magnitude of that would increase with increase in the number of databases and tables.

 

There are still some use cases where there is a need to replicate owner privilege as well. Here are some of them

1. When sentry is not configured in the target cluster when owner privileges feature is enabled in source cluster.
2. When owner privileges feature is enabled in source cluster and not in target cluster.

In both the above case, target cluster will not have owner privileges for the hive objects that are replicated.

 

In summary, replicating owner privilege should be configurable.It is better to have it as an input from the administrator performing the export/import operations.