sentry-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Arun Suresh (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (SENTRY-560) Sentry HDFS Syncup applies duplicate ACLs for the same scope, group and type
Date Wed, 03 Dec 2014 06:44:12 GMT

    [ https://issues.apache.org/jira/browse/SENTRY-560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14232678#comment-14232678
] 

Arun Suresh commented on SENTRY-560:
------------------------------------

Committed to _master_ :

{noformat}
Repository: incubator-sentry
Updated Branches:
  refs/heads/master 02041c56d -> 9da6a6733


SENTRY-560: Sentry HDFS Syncup applies duplicate ACLs for the same scope, group and type (Reviewed
by Lenni Kuff)


Project: http://git-wip-us.apache.org/repos/asf/incubator-sentry/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-sentry/commit/9da6a673
Tree: http://git-wip-us.apache.org/repos/asf/incubator-sentry/tree/9da6a673
Diff: http://git-wip-us.apache.org/repos/asf/incubator-sentry/diff/9da6a673

Branch: refs/heads/master
Commit: 9da6a67330f179636d20f5719cd514e6fd8fe892
Parents: 02041c5
Author: Arun Suresh <asuresh@cloudera.com>
Authored: Tue Dec 2 22:42:15 2014 -0800
{noformat}


> Sentry HDFS Syncup applies duplicate ACLs for the same scope, group and type
> ----------------------------------------------------------------------------
>
>                 Key: SENTRY-560
>                 URL: https://issues.apache.org/jira/browse/SENTRY-560
>             Project: Sentry
>          Issue Type: Bug
>    Affects Versions: 1.5.0
>            Reporter: Arun Suresh
>            Assignee: Arun Suresh
>         Attachments: SENTRY-560.1.patch, SENTRY-560.2.patch
>
>
> If Sentry HDFS is turned on, check sample_table. The permission looks like this,
> {noformat}
> [root@x-sentry-1 ~]# hdfs dfs -getfacl /user/hive/warehouse/sample_table
> file: /user/hive/warehouse/sample_table
> owner: hive
> group: hive
> user::rwx
> user:hive:rwx
> group:hive:rwx
> other::---
> group:systest:rwx
> group:sentryDefaultAdmin:rwx
> mask::rwx
> other::--x
> {noformat}
> Notice, there are two "other::-" and "other::-x". If turn off this feature, using setfacl,
it will return errors,
> setfacl: Invalid ACL: multiple entries with same scope, type and name.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message