Mailing-List: contact commits-help@sentry.incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@sentry.incubator.apache.org
Date: Tue, 23 Feb 2016 17:26:18 +0000 (UTC)
From: "Ashish K Singh (JIRA)" <jira@apache.org>
To: commits@sentry.incubator.apache.org
Message-ID: <JIRA.12937687.1454974393000.123706.1456248378332@Atlassian.JIRA>
In-Reply-To: <JIRA.12937687.1454974393000@Atlassian.JIRA>
References: <JIRA.12937687.1454974393000@Atlassian.JIRA>
 <JIRA.12937687.1454974393717@arcas>
Subject: [jira] [Updated] (SENTRY-1057) Add implementations for acls' CRUD
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/SENTRY-1057?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ashish K Singh updated SENTRY-1057:
-----------------------------------
    Description: 
To allow users to perform CRUD of privileges we have couple of options.

1. Add a custom sentry specific CLI.
2. Reuse Kafka's CLI, kafka-acls.sh.

We propose to use the later approach as that will provide a seamless experience to users. Moreover, Kafka's acls cli supports plugging in third party authorizer implementations.

Kafka will authenticate users before passing user's request to Sentry to perform ACLs CRUD. Sentry can assume that users requests coming to it for performing ACLs CRUD are authenticated and authorized.

  was:
To allow users to perform CRUD of privileges we have couple of options.

1. Add a custom sentry specific CLI.
2. Reuse Kafka's CLI, kafka-acls.sh.

We propose to use the later approach as that will provide a seamless experience to users. Moreover, Kafka's acls cli supports plugging in third party authorizer implementations.


> Add implementations for acls' CRUD
> ----------------------------------
>
>                 Key: SENTRY-1057
>                 URL: https://issues.apache.org/jira/browse/SENTRY-1057
>             Project: Sentry
>          Issue Type: Sub-task
>            Reporter: Ashish K Singh
>            Assignee: Ashish K Singh
>             Fix For: 1.7.0
>
>
> To allow users to perform CRUD of privileges we have couple of options.
> 1. Add a custom sentry specific CLI.
> 2. Reuse Kafka's CLI, kafka-acls.sh.
> We propose to use the later approach as that will provide a seamless experience to users. Moreover, Kafka's acls cli supports plugging in third party authorizer implementations.
> Kafka will authenticate users before passing user's request to Sentry to perform ACLs CRUD. Sentry can assume that users requests coming to it for performing ACLs CRUD are authenticated and authorized.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)