[
https://issues.apache.org/jira/browse/SENTRY-2371?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16629392#comment-16629392
]
Na Li commented on SENTRY-2371:
-------------------------------
[~spena] I have discussed the name with Hao Hao.
"list_sentry_privileges_for_user" is very close to existing function
"list_sentry_privileges_by_user" it is not obvious which one returns privileges
directly assigned to user directly, and which one is for directly and
indirectly.
When we support assigning role to user, we can add comment in
"list_sentry_privileges_by_user_and_itsgroups" to make it clear that it
includes all 3 scenarios of privileges:
1) directly to user
2) indirectly through role to user
3) indirectly through role to group to user
> Add a new thrift API for getting all privileges a user has
> -----------------------------------------------------------
>
> Key: SENTRY-2371
> URL: https://issues.apache.org/jira/browse/SENTRY-2371
> Project: Sentry
> Issue Type: Improvement
> Affects Versions: 2.1.0
> Reporter: Hao Hao
> Assignee: Hao Hao
> Priority: Major
> Fix For: 2.2.0
>
> Attachments: SENTRY-2371.1.patch, SENTRY-2371.2.patch
>
>
> SENTRY-2256 introduces an API to list the privileges directly assigned to a
> user. But there isn't an API to list all privileges a user has including the
> ones granted to the group the user is in. Such an API is important when
> clients need to find out all privilege a user has.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
