To answer your second question - IP address based authorization isn't
supported.
- Alex
On Thu, Oct 19, 2017 at 8:20 AM Chen Song <chen.song...@gmail.com> wrote:
> Thanks Alexander.
>
> I asked because I see the HDFS ACLs sync feature for Sentry. I am clear
> now.
> Do you have any idea on my second question?
>
> Chen
>
> On Wed, Oct 18, 2017 at 10:59 PM Alexander Kolbasov <ak...@cloudera.com>
> wrote:
>
>> Hi Chen,
>>
>> Apache Sentry goal is to provide security features for other Apache
>> products - mainly Apache {Hive, Impala, Solr, Kafka}. It doesn't provide
>> HDFS access protections.
>>
>> - Alex.
>>
>> On Wed, Oct 18, 2017 at 12:05 PM, Chen Song <chen.song...@gmail.com>
>> wrote:
>>
>>> I have a few questions on Sentry. I have some thoughts in my mind but
>>> just
>>> want to confirm with the community.
>>>
>>> 1. Does Sentry have a way to block HDFS superuser from access HDFS
>>> directories?
>>> 2. Does Sentry support blacklisting a list of IPs from Hive or HDFS
>>> access?
>>>
>>> After a bit search, I don't find a way for both but I want to double
>>> check
>>> again.
>>>
>>> Chen
>>>
>>
>>
