sentry-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Shreepadma Venugopalan (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (SENTRY-136) Thrift request structs should include the groupName in addition to the userName
Date Wed, 12 Mar 2014 22:14:48 GMT

    [ https://issues.apache.org/jira/browse/SENTRY-136?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13932507#comment-13932507
] 

Shreepadma Venugopalan commented on SENTRY-136:
-----------------------------------------------

https://reviews.apache.org/r/19160/

> Thrift request structs should include the groupName in addition to the userName
> -------------------------------------------------------------------------------
>
>                 Key: SENTRY-136
>                 URL: https://issues.apache.org/jira/browse/SENTRY-136
>             Project: Sentry
>          Issue Type: Sub-task
>            Reporter: Shreepadma Venugopalan
>            Assignee: Shreepadma Venugopalan
>         Attachments: SENTRY-136.patch
>
>
> Today, thrift request structs use the userName of the user on whose behalf the request
is performed. Instead, we should include the list of groups to which the user belongs. Benefits,
> a) user-group resolution can be restricted to the client i.e., impala, hs2, solr etc
and hence sentry service doesn't have to resolve the mapping.
> b) user-group mapping doesn't have to present on the node that's hosting the sentry service.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message