[
https://issues.apache.org/jira/browse/SENTRY-2334?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16570364#comment-16570364
]
Na Li commented on SENTRY-2334:
-------------------------------
[~arjunmishra13] What's your approach? Sentry supports hierarchical privilege:
if user has all on DB, this user will be able to access table with all
privilege. Exact match cannot support hierarchical privilege
> Optimize Sentry privilege comparison for requested privileges with current
> privileges
> -------------------------------------------------------------------------------------
>
> Key: SENTRY-2334
> URL: https://issues.apache.org/jira/browse/SENTRY-2334
> Project: Sentry
> Issue Type: Improvement
> Components: Sentry
> Reporter: Arjun Mishra
> Assignee: Arjun Mishra
> Priority: Major
> Fix For: 2.1.0
>
>
> Sentry privilege comparison is not optimized when there are large number of
> Hive Context inputs and therefore large number of requested privileges.
> Currently Sentry checks for each requiredInputPrivilege by comparing
> privileges for that input with all privileges of group/role. If number of
> inputs are large, and number of privileges assigned to role+group are large
> this request takes a long time
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
