Sentry-jdk-1.7 - Build # 707 - Unstable
The Apache Jenkins build system has built Sentry-jdk-1.7 (build #707) Status: Unstable Check console output at https://builds.apache.org/job/Sentry-jdk-1.7/707/ to view the results.
HS2 doAs setting to false
Hi, I was reading HS2 integration doc and found we needed to turn off hive.server2.enable.doAs. My questions are : 1. What are impact or what HS2 feature we will lose? In other words, can't we submit query to HS2 from another service as end user? 2. Why this restriction? Btw this is my second question to sentry mail-list. These two questions are critical for me to decided about Sentry adoption at Uber. Can someone please help on this? Regards, Mohammad
Re: Sentry-HDFS sync
Hi Mohammad, Sentry translates the permissions of hive tables/databases to underlying file system directories in form of file system ACLS. So, even without using HCat, you can still rely on file system permissions. Please see here for detailed explanation on how it works: https://cwiki.apache.org/confluence/display/SENTRY/Sentry+Tutorial#SentryTutorial-Sentry-HDFSSynchronization Regards, On Mon, Aug 8, 2016 at 9:22 AM, Mohammad Islam wrote: > Hi,What are the constraints of HDFS-sync feature?Can any MR/pig job's HDFS > access be controlled by Sentry? or they MUST use HCatalog IOFormat/Loader? > Regards,Mohammad > -- Sravya Tirukkovalur
