[ 
https://issues.apache.org/jira/browse/SENTRY-2432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16660810#comment-16660810
 ] 

Na Li commented on SENTRY-2432:
-------------------------------

[~kkalyan] LDAP is not the only way to integrate with Sentry and provide user 
account. 

In Unix, it is possible to create user "user_1" and "USER_1", and they should 
be treated as different user. 

You can look at https://issues.apache.org/jira/browse/SENTRY-319, which changes 
group name, and make it case sensitive.

> The case of a username is ignored when determining object ownership
> -------------------------------------------------------------------
>
>                 Key: SENTRY-2432
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2432
>             Project: Sentry
>          Issue Type: Bug
>          Components: Sentry
>    Affects Versions: 2.1.0, 2.2.0
>            Reporter: Na Li
>            Assignee: Na Li
>            Priority: Major
>         Attachments: SENTRY-2432.001.patch
>
>
> Sentry saves user name associated with a privilege in lower case. And when 
> getting privileges of a given user, the query returns the privileges 
> associated with a user in case-insensitive way. 
> Therefore, if there are two users, only differ in case, will have same 
> privileges.
> For example:
> 1) User user_1 is granted privilege "ALL" on a database DB_1
> 2) then User USER_1 has full access on that database, 
> The desired behavior is to keep user name case sensitive.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to