[
https://issues.apache.org/jira/browse/SENTRY-2490?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16752545#comment-16752545
]
kalyan kumar kalvagadda edited comment on SENTRY-2490 at 1/25/19 6:25 PM:
--------------------------------------------------------------------------
[~arjunmishra13] If you look at the code below
{noformat}
private static FsAction getFAction(String sentryPriv) {
String[] strPrivs = sentryPriv.trim().split(",");
FsAction retVal = FsAction.NONE;
for (String strPriv : strPrivs) {
FsAction action = ACTION_MAPPING.get(strPriv.toUpperCase());
if (action == null) {
// Encountered a privilege that is not supported. Since we do not know
what
// to do with it we just drop all access.
LOG.warn("Unsupported privilege {}, disabling all access", strPriv);
action = FsAction.NONE;
}
retVal = retVal.or(action);
}
return retVal;
}
{noformat}
At this line *retVal = retVal.or(action)*, if the action is NONE, it may not
update the *retval*.
was (Author: kkalyan):
[~arjunmishra13] If you look at the code below
{noformat}
private static FsAction getFAction(String sentryPriv) {
String[] strPrivs = sentryPriv.trim().split(",");
FsAction retVal = FsAction.NONE;
for (String strPriv : strPrivs) {
FsAction action = ACTION_MAPPING.get(strPriv.toUpperCase());
if (action == null) {
// Encountered a privilege that is not supported. Since we do not know
what
// to do with it we just drop all access.
LOG.warn("Unsupported privilege {}, disabling all access", strPriv);
action = FsAction.NONE;
}
retVal = retVal.or(action);
}
return retVal;
}
{noformat}
At this libe *retVal = retVal.or(action)*, if the action is NONE, it may not
update the *retval*.
> NN is unfamiliar with REFRESH privileges and sets FSAction to NONE on the
> group when it sees it in a full update
> ----------------------------------------------------------------------------------------------------------------
>
> Key: SENTRY-2490
> URL: https://issues.apache.org/jira/browse/SENTRY-2490
> Project: Sentry
> Issue Type: Bug
> Components: Sentry
> Affects Versions: 2.1.0
> Reporter: Arjun Mishra
> Assignee: Arjun Mishra
> Priority: Major
>
> When NN tries to get the FS action on Sentry managed paths, it checks against
> the ACTION_MAPPING map values. Currently this dataset doesn't have REFRESH
> listed. When NN sees a REFRESH privilege it will flag it as unsupported and
> set the FS action as NONE on that path for that group. This seems to happen
> only with full update. It will also override any other privilege that group
> had on that path
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
