[SENTRY-591] create table should have output privilege in DB scope

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.5.0
• Assignee: Xiaomeng Huang
• Reporter: Xiaomeng Huang
• Created: 19/Dec/14 06:15
• Updated: 18/Mar/15 05:13
• Resolved: 29/Jan/15 07:49

Description

Currently Create Table in sentry need input permission in DB like below:

HiveAuthzPrivileges tableCreatePrivilege = new HiveAuthzPrivileges.AuthzPrivilegeBuilder().
        addInputObjectPriviledge(AuthorizableType.Db, EnumSet.of(DBModelAction.CREATE)).
        addInputObjectPriviledge(AuthorizableType.URI, EnumSet.of(DBModelAction.ALL)).//TODO: make it optional
        setOperationScope(HiveOperationScope.DATABASE).
        setOperationType(HiveOperationType.DDL).
        build();

But when we execute "create table", we can get entities from WriteEntity, and get nothing from ReadEntity, so we should change input to output for "CreateTable".
This jira also blocks V2 feature, in V2, I just get enities from ReadEnity/WriteEnity.

Issue Links

• blocks: SENTRY-498 Sentry integration with Hive authorization framework V2
• is depended upon by: SENTRY-514 Enable e2e tests for authorization V2