accumulo-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Michael Ridley <mrid...@clouderagovt.com>
Subject Re: Apache Sentry
Date Thu, 08 May 2014 14:11:02 GMT
I also think it's a good idea, although I'm not sure exactly how it would
work.  The low(er) hanging fruit is to do what is currently supported with
Hive and Impala using HBase as a backend (except using Accumulo).  There is
some work going on with getting Impala on Accumulo in a few places, but I
have no idea about when or if that will see the light of day.  There was
some work years ago on making Accumulo work with Hive, but I don't know
that it was ever finished or released (not as far as I know).

This approach makes sense, given that Sentry has SQL-style RBAC semantics.
However applying Sentry to a "native" Accumulo mutation seems like it would
be a little bit trickier to implement.

It is the case that Sentry has support for Cloudera Search (index level
right now).  The semantics for search based permissions are different from
the original SQL permissions, so it's not incomprehensible to me that
additional semantics could be added to support BigTable type actions.  But
I don't know of anyone working on that right now.

Michael


On Thu, May 1, 2014 at 9:55 AM, Christopher <ctubbsii@apache.org> wrote:

> I have not, but I think it's a great idea.
>
> --
> Christopher L Tubbs II
> http://gravatar.com/ctubbsii
>
>
> On Wed, Apr 30, 2014 at 10:41 PM, Arshak Navruzyan <arshakn@gmail.com>
> wrote:
> > Has anyone tried to integrate Accumulo's authorizations with Apache
> Sentry?
>



-- 
Michael Ridley <mridley@clouderagovt.com>
Solutions Architect
Cloudera Government Solutions Inc.

Mime
View raw message