-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/67690/#review205181
-----------------------------------------------------------


Ship it!




Looks good. I see this same filter is used on getMSentryPrivilegesByAuth() and 
it's been working.
+1

- Sergio Pena


On June 21, 2018, 2:25 p.m., Arjun Mishra wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/67690/
> -----------------------------------------------------------
> 
> (Updated June 21, 2018, 2:25 p.m.)
> 
> 
> Review request for sentry, kalyan kumar kalvagadda and Sergio Pena.
> 
> 
> Repository: sentry
> 
> 
> Description
> -------
> 
> In SentryStore#getMSentryPrivileges when retrieving URI's the query condition 
> "addCustomParam("\"" + authHierarchy.getUri() + "\".startsWith(:URI)", URI, 
> authHierarchy.getUri());", will always be True. This should be changed to 
> filter by appropriate URI.
> 
> For example: when retrieving privileges on URI object "/x/y/z" this condition 
> is checked for: ""file:///x/y/z".startsWith(file:///x/y/z))", which is always 
> true
> 
> 
> Diffs
> -----
> 
>   
> sentry-service/sentry-service-server/src/main/java/org/apache/sentry/provider/db/service/persistent/SentryStore.java
>  f0e373a9a 
> 
> 
> Diff: https://reviews.apache.org/r/67690/diff/1/
> 
> 
> Testing
> -------
> 
> $ mvn -f sentry-service/sentry-service-server/pom.xml test
> 
> 
> Thanks,
> 
> Arjun Mishra
> 
>

Reply via email to