[ 
https://issues.apache.org/jira/browse/SENTRY-2134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16363215#comment-16363215
 ] 

Sergio Peña commented on SENTRY-2134:
-------------------------------------

Agree. 

HDFS sync only syncs privileges granted to databases and tables, not URIs. If 
you grant a privilege at the database level, then this will apply the same 
privilege recursively on all the table locations.

[~akolb] Do we have a plan to support URI on HDFS sync?

> Apply Hive URI grants recursively to subdirectories
> ---------------------------------------------------
>
>                 Key: SENTRY-2134
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2134
>             Project: Sentry
>          Issue Type: Improvement
>          Components: Hive Binding
>    Affects Versions: 1.8.0, 2.0.0, 1.7.1
>            Reporter: Ruslan Dautkhanov
>            Priority: Major
>              Labels: hive, uri
>
> Currently we need to add direct grants for all Hive tables' LOCATIONs. 
> Like, 'hdfs_staging/table1', 'hdfs_staging/table2', etc.. 
> It's not manageable this way. - we can't add grants for each and every table. 
> It would be great if we could just do one grant - 
> 'hdfs_staging/' so it would automatically be applied to  
> 'hdfs_staging/table1', 'hdfs_staging/table2', and other subdirectories.
> There is probably a reason this wasn't implemented earlier? Thanks for 
> considering this improvement.
> Also found another user's request on this - 
> https://community.cloudera.com/t5/Interactive-Short-cycle-SQL/Impala-Sentry-GRANT-ALL-ON-URI-not-cascaded-down-through/td-p/39928



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to