Uploaded image for project: 'Sentry (Retired)'
  1. Sentry (Retired)
  2. SENTRY-2549

Only groups but not users are passed to PrivilegeCache

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Patch Available
    • Critical
    • Resolution: Unresolved
    • None
    • None
    • None
    • None

    Description

      SENTRY-2539 introduced this issue, see line 83 of SimpleDBProviderBackend.java at https://github.com/apache/sentry/commit/843368fc2aeb154f9cf7b18d191c128644295ce5#diff-171087e076ec1622cb69536426d35b4a

      I guess that this means that privileges assigned to groups are respected, but user privileges are ignored. I think that this is the reason behind recent test failures in Apache Impala.

      Attachments

        1. SENTRY-2549.001.patch
          0.8 kB
          Csaba Ringhofer
        2. SENTRY-2549.001.patch
          0.8 kB
          Csaba Ringhofer
        3. SENTRY-2549.001.patch
          0.8 kB
          Na Li
        4. SENTRY-2549.001.patch
          0.8 kB
          Kalyan Kalvagadda
        5. SENTRY-2549.001.patch
          0.8 kB
          Csaba Ringhofer

        Issue Links

          is caused by

          Improvement - An improvement or enhancement to an existing feature or task. SENTRY-2539 PolicyEngine should be able to return privilege directly

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              csringhofer Csaba Ringhofer
              csringhofer Csaba Ringhofer
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated: