[
https://issues.apache.org/jira/browse/SENTRY-2189?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Anthony Young-Garner reassigned SENTRY-2189:
--------------------------------------------
Assignee: Anthony Young-Garner (was: Liam Sargent)
> Static Attribute Ingestion
> --------------------------
>
> Key: SENTRY-2189
> URL: https://issues.apache.org/jira/browse/SENTRY-2189
> Project: Sentry
> Issue Type: New Feature
> Affects Versions: 2.1.0
> Reporter: Liam Sargent
> Assignee: Anthony Young-Garner
> Priority: Major
> Labels: ABAC
> Attachments: SENTRY-2189.001.patch
>
>
> Static (file-based) attribute provider for Sentry ABAC.
> Attributes are string "tags" used to define a feature of the data which may
> require additional access control steps for security and compliance.
> Since Sentry already provides role-based access control, we must be able to
> define actions to take on data objects based on attribute/role combinations.
> This relationship can be modeled and effectively leveraged at query time with
> a specialized bidirectional map object providing low latency lookup between
> Attribute and Object, and vice versa.
> Attribute->Object definitions will be provided as a JSON object, or as JSON
> delta updates to existing definitions. This implementation will parse the
> definitions into the specialized Java object to provide near-O(1) lookup from
> Attribute-> Object, and from Object -> Attribute associations.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
