[
https://issues.apache.org/jira/browse/SENTRY-2121?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16321479#comment-16321479
]
Arjun Mishra edited comment on SENTRY-2121 at 1/11/18 12:58 AM:
----------------------------------------------------------------
We have more than 2 options. What about checking the state of
AUTHZ_PATHS_MAPPING table to see if it is in sync with SENTRY_PATH_CHANGE or
not? Another option is to always trigger a full snapshot every time HDFS sync
is enabled without touching AUTHZ_PATHS_SNAPSHOT_ID table.
was (Author: arjunmishra13):
We have more than 2 options. What about checking the state of
AUTHZ_PATHS_MAPPING table to see if it is in sync with SENTRY_PATH_CHANGE or
not? Another option is to always trigger a full snapshot every time HDFS sync
is enabled.
> Notifications processed during times when HDFS sync is disabled will not be
> applied as ACLs when later HDFS sync was to be enabled
> ----------------------------------------------------------------------------------------------------------------------------------
>
> Key: SENTRY-2121
> URL: https://issues.apache.org/jira/browse/SENTRY-2121
> Project: Sentry
> Issue Type: Bug
> Components: Sentry
> Affects Versions: 2.1.0
> Reporter: Arjun Mishra
> Assignee: Arjun Mishra
> Labels: triaged
>
> When HDFS sync is disabled, we don't update the AUTHZ_PATHS_MAPPING table.
> However, when HDFS sync is enabled, ACLs that are generated are based on
> entries in the AUTHZ_PATHS_MAPPING table. So this means that if we were to
> disable HDFS sync and later enable HDFS sync, ACLs for all notifications that
> were processed during the times when HDFS sycn was disabled won't be created
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
