[
https://issues.apache.org/jira/browse/SENTRY-2481?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergio Peña updated SENTRY-2481:
--------------------------------
Resolution: Fixed
Fix Version/s: 2.2.0
Status: Resolved (was: Patch Available)
> Filter HMS server-side objects based on HMS user authorization
> --------------------------------------------------------------
>
> Key: SENTRY-2481
> URL: https://issues.apache.org/jira/browse/SENTRY-2481
> Project: Sentry
> Issue Type: New Feature
> Components: Sentry
> Reporter: Sergio Peña
> Assignee: Sergio Peña
> Priority: Major
> Fix For: 2.2.0
>
> Attachments: SENTRY-2481.1.patch, SENTRY-2481.2.patch,
> SENTRY-2481.3.patch
>
>
> Sentry provides a mechanism to filter HMS objects from users who are not
> authorized to view certain objects, but this filter happens on the HMS client
> only. The support for the HMS server-side is needed as there might clients
> who access the server using Thrift API causing this security concern.
>
> To provide with such support. Sentry should re-use the
> SentryMetaStoreFilterHook, which will be called by the HMS server, in order
> to filter the unwanted objects.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
