Re: Review Request 45859: SENTRY-1120: Show role / privileges info in Sentry Service Webpage

2016-10-06 Thread Li Li
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/45859/ --- (Updated Oct. 7, 2016, 12:38 a.m.) Review request for sentry, Alexander

Re: Review Request 45859: SENTRY-1120: Show role / privileges info in Sentry Service Webpage

2016-10-06 Thread Li Li
> On Oct. 7, 2016, 12:28 a.m., Alexander Kolbasov wrote: > > sentry-service/sentry-service-server/src/main/java/org/apache/sentry/provider/db/service/thrift/SentryAdminServlet.java, > > line 92 > > > > > > Since you

Re: Review Request 52526: SENTRY-1477: Sentry clients should retry with another server when they get connection errors

2016-10-06 Thread Li Li
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/52526/ --- (Updated Oct. 7, 2016, 12:30 a.m.) Review request for sentry, Alexander

Re: Review Request 45859: SENTRY-1120: Show role / privileges info in Sentry Service Webpage

2016-10-06 Thread Alexander Kolbasov
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/45859/#review151614 ---

Re: Review Request 45859: SENTRY-1120: Show role / privileges info in Sentry Service Webpage

2016-10-06 Thread Li Li
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/45859/ --- (Updated Oct. 7, 2016, 12:26 a.m.) Review request for sentry, Alexander

Re: Review Request 52138: SENTRY-1463: Ensure HMS point-in-time snapshot consistency

2016-10-06 Thread Hao Hao
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/52138/ --- (Updated Oct. 6, 2016, 10:22 p.m.) Review request for sentry, Alexander

[DISCUSS] Changing transaction isolation level used by Sentry

2016-10-06 Thread Alexander Kolbasov
I think it is worth some discussion in the list. I think that the default read-committed isolation level used by Sentry is not sufficient - please see https://issues.apache.org/jira/browse/SENTRY-1486. So the proposal is to change it to repeatable-read. Does anyone have objections to it? - Alex

Re: New User Questions

2016-10-06 Thread Jim Halfpenny
Hi Lewis, Sentry provides role-based access control for a number of Hadoop services. It does not provide the full-stack security hardening you are looking for but it is an important part of the picture. The Cloudera documentation on Sentry goes a long way to explaining what Sentry is and how it