[SENTRY-583] Add boundary condition test coverage to HDFS synchronization test suite around max #of groups

• Type: Test
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.0, 1.5.0
• Fix Version/s: 1.8.0
• Assignee: Anne Yu
• Reporter: Lenni Kuff
• Created: 14/Dec/14 07:11
• Updated: 04/May/16 21:15
• Resolved: 04/May/16 21:15

Description

Normally, HDFS ACLs has a limit of 32 entries per object (HDFS-5617), but this limit should not be enforced when using Sentry HDFS synchronization. I verified that this works, but we should add a test case to cover this scenario. Something like:

1. Grant to >32 unique groups to a table
2. Verify -getfacls returns all items

It would also be interesting to see what happens when a new table is created when a database has been granted >32 groups. The new table's directory will inherit the permissions from the directory and I would assume that when the feature is disabled some of these will be missing. It would be good to verify that things don't blow up.

Issue Links

• links to: Review board link

Sub-Tasks

• Run full tests locally: mvn verify to see if it can pass nowadays: Resolved