Uploaded image for project: 'Hue (READ ONLY)'
  1. Hue (READ ONLY)
  2. HUE-7646

[sentry] Hue Sentry Security: permissions issue after updating privileges

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 4.1.0
    • Fix Version/s: 4.2.0
    • Component/s: con.sentry
    • Labels:
      None

      Description

      Steps to re-produce:

      1. enable Sentry HDFS permissions sync
      2. Create a sentry role or using existing role
      3. Provide SELECT grant on a database/table for this role and SAVE
      4. Check hdfs sync :
      $ hadoop fs -getfacl /user/hive/warehouse/somedatabase.db/

      Result:
      # owner: hive
      # group: hive
      user::rwx
      user:hive:rwx
      group::---
      group:user_group1:r-x 
      

      4. Elevate role's permission created in step 2 from SELECT to ALL and 'SAVE'
      5. Check hdfs sync :

      # owner: hive
      # group: hive
      user::rwx
      user:hive:rwx
      group::---
      group:user_group1:-wx
      

      Expected Result: Privileges should change to group:user_group1:rwx
      Actual Result: group:user_group1:-wx
      Same issue is happening when changing permission from ALL to SELECT, it doesn't show any privileges for that group.

        Attachments

          Activity

            People

            • Assignee:
              yingc Ying Chen
              Reporter:
              yingc Ying Chen
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: