[
https://issues.apache.org/jira/browse/SENTRY-2046?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Arjun Mishra updated SENTRY-2046:
---------------------------------
Description:
AUTHZ_PATHS_SNAPSHOT_ID is only populated when a full HMS snapshot is
persisted. When initially HDFS Sync is disabled, we will create a full snapshot
but never persist it, and at the same time populate SENTRY_HMS_NOTIFICATION_ID
table. Later when HDFS sync is enabled, a full snapshot will not occur unless
until HMS and Sentry are out of sync. This will result in ACL's not being
applied unless until HMS and Sentry are out of sync, since we only send NN
snapshots if AUTHZ_PATHS_SNAPSHOT_ID has values greater than 0
We should create a full snapshot if hdfsSync is enabled, and
AUTHZ_PATHS_SNAPSHOT_ID is empty
was:
AUTHZ_PATHS_SNAPSHOT_ID is only populated when a full HMS snapshot is
persisted. If for some reason this does not occur and
SENTRY_HMS_NOTIFICATION_ID table gets populated with newer values, a full
snapshot will not occur unless until HMS and Sentry are out of sync. This will
result in ACL's not being applied unless until HMS and Sentry are out of sync,
since we only send NN snapshots if AUTHZ_PATHS_SNAPSHOT_ID has values greater
than 0
We should create a full snapshot if hdfsSync is enabled, and
AUTHZ_PATHS_SNAPSHOT_ID is empty
> Create a full snapshot if AUTHZ_PATHS_SNAPSHOT_ID is empty, even if HMS and
> Sentry Notifications are in sync
> ------------------------------------------------------------------------------------------------------------
>
> Key: SENTRY-2046
> URL: https://issues.apache.org/jira/browse/SENTRY-2046
> Project: Sentry
> Issue Type: Bug
> Components: Sentry
> Affects Versions: 2.0.0
> Reporter: Arjun Mishra
> Assignee: Arjun Mishra
> Labels: bite-sized, mewbi
> Attachments: SENTRY-2046.01.patch
>
>
> AUTHZ_PATHS_SNAPSHOT_ID is only populated when a full HMS snapshot is
> persisted. When initially HDFS Sync is disabled, we will create a full
> snapshot but never persist it, and at the same time populate
> SENTRY_HMS_NOTIFICATION_ID table. Later when HDFS sync is enabled, a full
> snapshot will not occur unless until HMS and Sentry are out of sync. This
> will result in ACL's not being applied unless until HMS and Sentry are out of
> sync, since we only send NN snapshots if AUTHZ_PATHS_SNAPSHOT_ID has values
> greater than 0
> We should create a full snapshot if hdfsSync is enabled, and
> AUTHZ_PATHS_SNAPSHOT_ID is empty
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
