[ 
https://issues.apache.org/jira/browse/SENTRY-2371?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16596813#comment-16596813
 ] 

Dan Burkert commented on SENTRY-2371:
-------------------------------------

[~LinaAtAustin] - Hao is out for a few days, but I have some context on this 
feature request.  For Kudu/Sentry integration (KUDU-428), we'd like to have a 
single thrift API to call to gather all the privileges for a user.  The 
existing APIs require sending multiple sequential RPCs to Sentry to get all 
associated groups, then associated roles, then associated privileges.  It would 
be a lot more efficient if Sentry could perform this join for us on the server 
(perhaps even in the database?), and would save us from having to re-implement 
the join in C++.

> Add a new thrift API for getting all privileges a user has 
> -----------------------------------------------------------
>
>                 Key: SENTRY-2371
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2371
>             Project: Sentry
>          Issue Type: Improvement
>            Reporter: Hao Hao
>            Priority: Major
>
> SENTRY-2256 introduces an API to list the privileges directly assigned to a 
> user. But there isn't an API to list all privileges a user has including the 
> ones granted to the group the user is in. Such an API is important when 
> clients need to find out all privilege a user has.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to