This is an automated email from the ASF dual-hosted git repository. granthenke pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/kudu.git
commit 73285f6fd1978570144dd0974d85780db2d6478f Author: Hao Hao <[email protected]> AuthorDate: Mon Jun 10 15:25:34 2019 -0700 Bump Sentry version to b71a78e This patch bumps Sentry version to include SENTRY-2522, which is critical to improve the performance of ListTables by providing bulk permissions fetching. Change-Id: I4882d41aca0b1c058c1e002613e4629fdaeb543f Reviewed-on: http://gerrit.cloudera.org:8080/13598 Reviewed-by: Adar Dembo <[email protected]> Tested-by: Kudu Jenkins Reviewed-by: Grant Henke <[email protected]> --- src/kudu/sentry/sentry_common_service.thrift | 2 +- src/kudu/sentry/sentry_policy_service.thrift | 21 ++++++++++++++++++++- thirdparty/vars.sh | 6 +++--- 3 files changed, 24 insertions(+), 5 deletions(-) diff --git a/src/kudu/sentry/sentry_common_service.thrift b/src/kudu/sentry/sentry_common_service.thrift index a375348..b24bd8a 100644 --- a/src/kudu/sentry/sentry_common_service.thrift +++ b/src/kudu/sentry/sentry_common_service.thrift @@ -19,7 +19,7 @@ */ # DO NOT MODIFY! Copied from -# https://raw.githubusercontent.com/apache/sentry/505b42e81a9d85c4ebe8db3f48ad7a6e824a5db5/sentry-service/sentry-service-api/src/main/resources/sentry_common_service.thrift +# https://raw.githubusercontent.com/apache/sentry/b71a78ed960702536b35e1f048dc40dfc79992d4/sentry-service/sentry-service-api/src/main/resources/sentry_common_service.thrift # # With edits: # - Change cpp namespace to 'sentry' to match the Kudu codebase style. diff --git a/src/kudu/sentry/sentry_policy_service.thrift b/src/kudu/sentry/sentry_policy_service.thrift index 0d8c981..148d614 100644 --- a/src/kudu/sentry/sentry_policy_service.thrift +++ b/src/kudu/sentry/sentry_policy_service.thrift @@ -19,7 +19,7 @@ */ # DO NOT MODIFY! Copied from -# https://raw.githubusercontent.com/apache/sentry/505b42e81a9d85c4ebe8db3f48ad7a6e824a5db5/sentry-service/sentry-service-api/src/main/resources/sentry_policy_service.thrift +# https://raw.githubusercontent.com/apache/sentry/b71a78ed960702536b35e1f048dc40dfc79992d4/sentry-service/sentry-service-api/src/main/resources/sentry_policy_service.thrift # # With edits: # - Change cpp namespace to 'sentry' to match the Kudu codebase style. @@ -291,6 +291,19 @@ struct TListSentryPrivilegesByAuthResponse { 3: optional map<TSentryAuthorizable, TSentryPrivilegeMap> privilegesMapByAuthForUsers } +struct TListSentryPrivilegesByAuthUserRequest { +1: required i32 protocol_version = sentry_common_service.TSENTRY_SERVICE_V2, +2: required string requestorUserName, # user on whose behalf the request is issued +3: required set<TSentryAuthorizable> authorizableSet, +4: required string user +} + +struct TListSentryPrivilegesByAuthUserResponse { +1: required sentry_common_service.TSentryResponseStatus status, +# Authorizable to set of privileges map +2: optional map<TSentryAuthorizable, set<TSentryPrivilege>> privilegesMapByAuth, +} + # Obtain a config value from the Sentry service struct TSentryConfigValueRequest { 1: required i32 protocol_version = sentry_common_service.TSENTRY_SERVICE_V2, @@ -445,8 +458,14 @@ service SentryPolicyService TRenamePrivilegesResponse rename_sentry_privilege(1:TRenamePrivilegesRequest request); + # List sentry privileges filterted based on a set of authorizables, that + # granted to the given user and the given role if present. TListSentryPrivilegesByAuthResponse list_sentry_privileges_by_authorizable(1:TListSentryPrivilegesByAuthRequest request); + # List sentry privileges filterted based on a set of authorizables, that + # granted to the given user and the groups the user associated with. + TListSentryPrivilegesByAuthUserResponse list_sentry_privileges_by_authorizable_and_user(1:TListSentryPrivilegesByAuthUserRequest request); + TSentryConfigValueResponse get_sentry_config_value(1:TSentryConfigValueRequest request); # export the mapping data in sentry diff --git a/thirdparty/vars.sh b/thirdparty/vars.sh index fd8a82b..2e01115 100644 --- a/thirdparty/vars.sh +++ b/thirdparty/vars.sh @@ -231,12 +231,12 @@ HADOOP_VERSION=2.8.5 HADOOP_NAME=hadoop-$HADOOP_VERSION HADOOP_SOURCE=$TP_SOURCE_DIR/$HADOOP_NAME -# TODO(dan): bump to a release version once SENTRY-2371, SENTRY-2440 and SENTRY-2471 -# are published. The SHA below is the current head of the master branch. +# TODO(dan): bump to a release version once SENTRY-2371, SENTRY-2440, SENTRY-2471 +# and SENTRY-2522 are published. The SHA below is the current head of the master branch. # Note: Sentry releases source code only. To build the binary tarball, use `dist` # maven profile. For example, `mvn clean install -Pdist`. After a successful build, # the tarball will be available under sentry-dist/target. -SENTRY_VERSION=505b42e81a9d85c4ebe8db3f48ad7a6e824a5db5 +SENTRY_VERSION=b71a78ed960702536b35e1f048dc40dfc79992d4 SENTRY_NAME=sentry-$SENTRY_VERSION SENTRY_SOURCE=$TP_SOURCE_DIR/$SENTRY_NAME
