Uploaded image for project: 'Sentry (Retired)'
  1. Sentry (Retired)
  2. SENTRY-327

Support auth admin delegation via SQL construct 'with grant option'

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.4.0
    • 1.5.0
    • None
    • None

    Description

      Currently the authorization admins are created statically by setting a config property. Sentry should support admin delegation via 'with grant option' statement.

      Attachments

        1. Design Document of With Grant Option_v1.pdf
          321 kB
          Xiaomeng Huang
        2. Design Document of With Grant Option_v2.pdf
          323 kB
          Xiaomeng Huang
        3. SENTRY-327_003.patch
          104 kB
          Dapeng Sun
        4. SENTRY-327.patch
          158 kB
          Dapeng Sun

        Issue Links

          contains

          Sub-task - The sub-task of the issue SENTRY-340 Database implement for "with grant option"

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-341 Extend Thrift API for SentryStore to support "with grant option"

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-342 Grant check with grant option

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-343 Privileges query from database support for "With Grant Option"

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-345 Revoke check with grant option

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-349 Extend Hive Hook with Grant Option

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-370 Judgement of MSentryPrivilege implies child privileges

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-377 Add Hive e2e test for grantOption

          • Major - Major loss of function.
          • Resolved
          incorporates

          Task - A task that needs to be done. SENTRY-771 Add documentation for Delegated GRANT and REVOKE

          • Major - Major loss of function.
          • Resolved
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. SENTRY-335 Support with grant option

          • Major - Major loss of function.
          • Resolved
          is related to

          Sub-task - The sub-task of the issue SENTRY-473 Revoke privilege should support revoking of grant option

          • Major - Major loss of function.
          • Patch Available
          relates to

          Test - A new unit, integration or system test. SENTRY-383 Add TestPrivilegeWithGrantOption to cluster test profile

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved
          links to

          Web Link Review board link

          Activity

            People

              Huang Xiaomeng Xiaomeng Huang
              prasadm Prasad Suresh Mujumdar
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: