sentry-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hadoop QA (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (SENTRY-2265) Translate owner privilege in sentry binding for authorization
Date Tue, 19 Jun 2018 02:19:00 GMT

    [ https://issues.apache.org/jira/browse/SENTRY-2265?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16516566#comment-16516566
] 

Hadoop QA commented on SENTRY-2265:
-----------------------------------

Here are the results of testing the latest attachment
https://issues.apache.org/jira/secure/attachment/12928268/SENTRY-2265.1.patch against master.

{color:green}Overall:{color} +1 all checks pass

{color:green}SUCCESS:{color} all tests passed

Console output: https://builds.apache.org/job/PreCommit-SENTRY-Build/3892/console

This message is automatically generated.

> Translate owner privilege in sentry binding for authorization
> -------------------------------------------------------------
>
>                 Key: SENTRY-2265
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2265
>             Project: Sentry
>          Issue Type: Sub-task
>          Components: Sentry
>            Reporter: kalyan kumar kalvagadda
>            Assignee: Sergio Peña
>            Priority: Major
>         Attachments: SENTRY-2265.1.patch
>
>
> When authorization is done, sentry binding should translate owner privilege to "ALL"
before using it.
> In CommonPrivilege, need to add Owner privilege and treat it as ALL privilege for authorization
> {code}
>  private boolean impliesResource(ImplyMethodType implyMethodType, String policyValue,
String requestValue) {
>     // wildcard support, "*", "+", "all"("+" and "all" are for backward compatibility)
are represented as wildcard
>     // if requestValue is wildcard, means privilege request is to match with any value
of given resource
>     if (SentryConstants.RESOURCE_WILDCARD_VALUE.equals(policyValue)
>             || SentryConstants.RESOURCE_WILDCARD_VALUE.equals(requestValue)
>             || SentryConstants.RESOURCE_WILDCARD_VALUE_ALL.equalsIgnoreCase(policyValue)
>             || SentryConstants.RESOURCE_WILDCARD_VALUE_ALL.equalsIgnoreCase(requestValue)
>             || SentryConstants.RESOURCE_WILDCARD_VALUE_SOME.equals(requestValue)) {
>       return true;
>     }
> {code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message