[jira] [Commented] (SENTRY-2149) Implement functionality to show groups
[
https://issues.apache.org/jira/browse/SENTRY-2149?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16665229#comment-16665229
]
Sachin commented on SENTRY-2149:
[~akolb] - Could please let me know how to use the interactive Sentry CLI? so
that I can use show groups command.
As sentry shell is only for Hive authorization metadata now, and supports the
following commands:
create/drop role
add/delete group to/from role
grant/revoke privilege to/from role
list role for group
list privilege for role
> Implement functionality to show groups
> --
>
> Key: SENTRY-2149
> URL: https://issues.apache.org/jira/browse/SENTRY-2149
> Project: Sentry
> Issue Type: New Feature
>Reporter: Sachin
>Priority: Major
>
> Sentry allows to list the roles
> SHOW ROLES;
> There should be also a way to show the groups . Currently it seems that this
> is only possible by directly querying the Sentry database. This functionality
> should be provided out-of-the-box similar to the statement above.
> The functionality could look similar to the following statement
> {code:sql}
> SHOW GROUPS;{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
[jira] [Commented] (SENTRY-2149) Implement functionality to show groups
[
https://issues.apache.org/jira/browse/SENTRY-2149?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16390575#comment-16390575
]
Alexander Kolbasov commented on SENTRY-2149:
We have two sentry CLI implementations - SentryShell and interactive Sentry
CLI. The latter can show all groups.
> Implement functionality to show groups
> --
>
> Key: SENTRY-2149
> URL: https://issues.apache.org/jira/browse/SENTRY-2149
> Project: Sentry
> Issue Type: New Feature
>Reporter: Sachin
>Priority: Major
>
> Sentry allows to list the roles
> SHOW ROLES;
> There should be also a way to show the groups . Currently it seems that this
> is only possible by directly querying the Sentry database. This functionality
> should be provided out-of-the-box similar to the statement above.
> The functionality could look similar to the following statement
> {code:sql}
> SHOW GROUPS;{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
[jira] [Commented] (SENTRY-2149) Implement functionality to show groups
[
https://issues.apache.org/jira/browse/SENTRY-2149?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16387745#comment-16387745
]
Sachin commented on SENTRY-2149:
Thanks for comments. Yes request is use to see all the groups from sentry.
Sentry CLI mean Sentry shell?. I have checked with Sentry shell, it doesn't
have the "SHOW GROUPS".
Please correct me If I am wrong.
> Implement functionality to show groups
> --
>
> Key: SENTRY-2149
> URL: https://issues.apache.org/jira/browse/SENTRY-2149
> Project: Sentry
> Issue Type: New Feature
>Reporter: Sachin
>Priority: Major
>
> Sentry allows to list the roles
> SHOW ROLES;
> There should be also a way to show the groups . Currently it seems that this
> is only possible by directly querying the Sentry database. This functionality
> should be provided out-of-the-box similar to the statement above.
> The functionality could look similar to the following statement
> {code:sql}
> SHOW GROUPS;{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
[jira] [Commented] (SENTRY-2149) Implement functionality to show groups
[
https://issues.apache.org/jira/browse/SENTRY-2149?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16386415#comment-16386415
]
Alexander Kolbasov commented on SENTRY-2149:
The submitter can clarify this, but looks like the request is to be able to see
all groups known to Sentry. Note that you can do this with Sentry CLI.
> Implement functionality to show groups
> --
>
> Key: SENTRY-2149
> URL: https://issues.apache.org/jira/browse/SENTRY-2149
> Project: Sentry
> Issue Type: New Feature
>Reporter: Sachin
>Priority: Major
>
> Sentry allows to list the roles
> SHOW ROLES;
> There should be also a way to show the groups . Currently it seems that this
> is only possible by directly querying the Sentry database. This functionality
> should be provided out-of-the-box similar to the statement above.
> The functionality could look similar to the following statement
> {code:sql}
> SHOW GROUPS;{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
[jira] [Commented] (SENTRY-2149) Implement functionality to show groups
[
https://issues.apache.org/jira/browse/SENTRY-2149?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16386367#comment-16386367
]
kalyan kumar kalvagadda commented on SENTRY-2149:
-
There are couple of things here
# "SHOW ROLES" command list all the roles that are grant to user who is
running this command.
# I'm not sure what do you meant when you said "SHOW GROUPS" should be
supported.
## If you meant, "SHOW GROUPS" should return the list of the groups that user
belongs. This is not a feature that sentry should be supporting as sentry is
not a source of truth for this information.
## This information should be retrieved from differently. It should be based
on the user<=>group mapping service that you are using.
> Implement functionality to show groups
> --
>
> Key: SENTRY-2149
> URL: https://issues.apache.org/jira/browse/SENTRY-2149
> Project: Sentry
> Issue Type: New Feature
>Reporter: Sachin
>Priority: Major
>
> Sentry allows to list the roles
> SHOW ROLES;
> There should be also a way to show the groups . Currently it seems that this
> is only possible by directly querying the Sentry database. This functionality
> should be provided out-of-the-box similar to the statement above.
> The functionality could look similar to the following statement
> {code:sql}
> SHOW GROUPS;{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
