----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/45859/#review151591 -----------------------------------------------------------
Fix it, then Ship it! sentry-service/sentry-service-server/src/main/java/org/apache/sentry/provider/db/service/thrift/SentryAdminServlet.java (line 39) <https://reviews.apache.org/r/45859/#comment220015> Please add some comment explaining where did this teplate come from. Did you invent it? Did you copy it from somewhere? sentry-service/sentry-service-server/src/main/java/org/apache/sentry/provider/db/service/thrift/SentryAdminServlet.java (line 92) <https://reviews.apache.org/r/45859/#comment220024> Do you need to add Pragma: no-cache Expires: 0 as well to disable caching? Different clients usig differet mechanisms. - Alexander Kolbasov On Oct. 4, 2016, 10:23 p.m., Li Li wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/45859/ > ----------------------------------------------------------- > > (Updated Oct. 4, 2016, 10:23 p.m.) > > > Review request for sentry, Alexander Kolbasov, Anne Yu, Hao Hao, Lenni Kuff, > and Sravya Tirukkovalur. > > > Repository: sentry > > > Description > ------- > > Show role / privileges info in Sentry Service Webpage. Since it is only used > for debug / test currently, this webpage can be seen only when > SENTRY_WEB_ADMIN_SERVLET_ENABLED is true. > > > Diffs > ----- > > > sentry-service/sentry-service-common/src/main/java/org/apache/sentry/service/thrift/ServiceConstants.java > 5ec364c460e74d0a9dae8a28c20042360157b8a0 > > sentry-service/sentry-service-server/src/main/java/org/apache/sentry/provider/db/service/thrift/SentryAdminServlet.java > PRE-CREATION > > sentry-service/sentry-service-server/src/main/java/org/apache/sentry/provider/db/service/thrift/SentryWebServer.java > a42f395270996da345ce49edca909e0438383759 > > Diff: https://reviews.apache.org/r/45859/diff/ > > > Testing > ------- > > Already tested in kerberos cluster. When > sentry.service.web.authentication.type is set to KERBEROS, only the > SENTRY_WEB_SECURITY_ALLOW_CONNECT_USERS can see this page. Also this webpage > can be seen only when SENTRY_WEB_ADMIN_SERVLET_ENABLED is true. > > > Thanks, > > Li Li > >