Mubashir Kazia created SENTRY-1563:
--------------------------------------

             Summary: sentry.service.allow.connect property should support 
groups
                 Key: SENTRY-1563
                 URL: https://issues.apache.org/jira/browse/SENTRY-1563
             Project: Sentry
          Issue Type: Improvement
          Components: Service
            Reporter: Mubashir Kazia


With the introduction of Sentry Service for Kafka and Solr, Sentry service is 
now accessed directly by admin users (though the Sentry Shell CLI for Solr and 
Kafka) rather than through HS2 or Impala. For this to work admin users have to 
be configured in sentry.service.allow.connect. This is not scalable as he 
admins are added or deleted, the Sentry service need to be reconfigured and 
restarted. We suggest that a this property accepts both groups and users like 
other Hadoop ACLs.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to