Uploaded image for project: 'Sentry'
  1. Sentry
  2. SENTRY-327

Support auth admin delegation via SQL construct 'with grant option'

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.4.0
    • Fix Version/s: 1.5.0
    • Component/s: None
    • Labels:
      None

      Description

      Currently the authorization admins are created statically by setting a config property. Sentry should support admin delegation via 'with grant option' statement.

        Attachments

        1. Design Document of With Grant Option_v1.pdf
          321 kB
          Xiaomeng Huang
        2. Design Document of With Grant Option_v2.pdf
          323 kB
          Xiaomeng Huang
        3. SENTRY-327.patch
          158 kB
          Dapeng Sun
        4. SENTRY-327_003.patch
          104 kB
          Dapeng Sun

          Issue Links

          contains

          Sub-task - The sub-task of the issue SENTRY-340 Database implement for "with grant option"

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-341 Extend Thrift API for SentryStore to support "with grant option"

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-342 Grant check with grant option

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-343 Privileges query from database support for "With Grant Option"

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-345 Revoke check with grant option

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-349 Extend Hive Hook with Grant Option

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-370 Judgement of MSentryPrivilege implies child privileges

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue SENTRY-377 Add Hive e2e test for grantOption

          • Major - Major loss of function.
          • Resolved
          incorporates

          Task - A task that needs to be done. SENTRY-771 Add documentation for Delegated GRANT and REVOKE

          • Major - Major loss of function.
          • Resolved
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. SENTRY-335 Support with grant option

          • Major - Major loss of function.
          • Resolved
          is related to

          Sub-task - The sub-task of the issue SENTRY-473 Revoke privilege should support revoking of grant option

          • Major - Major loss of function.
          • Patch Available
          relates to

          Test - A new unit, integration or system test. SENTRY-383 Add TestPrivilegeWithGrantOption to cluster test profile

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved
          links to

          Web Link Review board link

            Activity

              People

              • Assignee:
                Huang Xiaomeng Xiaomeng Huang
                Reporter:
                prasadm Prasad Suresh Mujumdar
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: