[
https://issues.apache.org/jira/browse/SENTRY-2323?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
kalyan kumar kalvagadda updated SENTRY-2323:
--------------------------------------------
Description:
Currently we do not have any clue on what’s going on with the ACL information
in Sentry namenode plug-in.
*Solution:* To understand the changes happening to HDFS ACL’s, sentry could
use the current HDFS audit logging to log the ACL changes and event that
triggered the change.
# Permission grants and event that caused it.
** Let’s take an example: READ permission granted on
/user/hive/warehouse/x/y/z to groups group1, group2.. etc Event: Explicit Grant
# Permission revoke and the event that caused it.
** Let’s take an example:
READ permission removed from /user/hive/warehouse/x/y/z to groups group1,
group2.. etc Event: Explicit Revoke.
READ/WRITE permissions removed from /user/hive/warehouse/x/y/z to groups
group1, group2.. etc Event: Explicit File removed.
** Permission change because of changes to roles is not possible to show as
the data would be huge.
was:
Currently we do not have any clue on what’s going on with the ACL information
in Sentry namenode plug-in.
*Solution: *To understand the changes happening to HDFS ACL’s, sentry could use
the current HDFS audit logging to log the ACL changes and event that triggered
the change.
# Permission grants and event that caused it.
** Let’s take an example: READ permission granted on /user/hive/warehouse/x/y/z
to groups group1, group2.. etc Event: Explicit Grant
# Permission revoke and the event that caused it.
** Let’s take an example:
READ permission removed from /user/hive/warehouse/x/y/z to groups group1,
group2.. etc Event: Explicit Revoke.
READ/WRITE permissions removed from /user/hive/warehouse/x/y/z to groups
group1, group2.. etc Event: Explicit File removed.
** Permission change because of changes to roles is not possible to show as the
data would be huge.
> Audit log to understand the changes to path and permission information in
> Sentry namenode-plugin
> ------------------------------------------------------------------------------------------------
>
> Key: SENTRY-2323
> URL: https://issues.apache.org/jira/browse/SENTRY-2323
> Project: Sentry
> Issue Type: Sub-task
> Components: Sentry
> Affects Versions: 2.1.0
> Reporter: kalyan kumar kalvagadda
> Assignee: Arjun Mishra
> Priority: Major
>
> Currently we do not have any clue on what’s going on with the ACL information
> in Sentry namenode plug-in.
> *Solution:* To understand the changes happening to HDFS ACL’s, sentry could
> use the current HDFS audit logging to log the ACL changes and event that
> triggered the change.
> # Permission grants and event that caused it.
> ** Let’s take an example: READ permission granted on
> /user/hive/warehouse/x/y/z to groups group1, group2.. etc Event: Explicit
> Grant
> # Permission revoke and the event that caused it.
> ** Let’s take an example:
> READ permission removed from /user/hive/warehouse/x/y/z to groups group1,
> group2.. etc Event: Explicit Revoke.
> READ/WRITE permissions removed from /user/hive/warehouse/x/y/z to groups
> group1, group2.. etc Event: Explicit File removed.
> ** Permission change because of changes to roles is not possible to show as
> the data would be huge.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
