Re: [ANNOUNCE] Apache Sentry 2.1.0 released

Fantastic! Thank you Lina for doing the release! > On Oct 2, 2018, at 08:57, Na Li wrote: > > The Apache Sentry team is happy to announce the release of version 2.1.0. > Apache Sentry is a system to enforce fine grained role based authorization > to data and metadata stored on a Hadoop cluster.

Re: Review Request 68831: SENTRY-2417: fix LocalGroupMappingService INI format class docs

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/68831/#review208979 --- Ship it! Ship It! - Alexander Kolbasov On Sept. 24, 2018

Re: Review Request 68488: SENTRY-2367: Implement subsystem to allow for pluggable attribute providers and transports

> On Aug. 29, 2018, 8:29 p.m., Steve Moist wrote: > > lombok.config > > Lines 1 (patched) > > > > > > In introducing lombok into sentry. Will the configs for the existing > > sl4j need to be updated or modified? > >

Re: Review Request 68488: SENTRY-2367: Implement subsystem to allow for pluggable attribute providers and transports

://reviews.apache.org/r/68488/#comment291383> Typo? "Provider manager *what*" sentry-spi/src/main/java/org/apache/sentry/spi/Spi.java Lines 24 (patched) <https://reviews.apache.org/r/68488/#comment291384> Is this file coming from somewhere? - Alexander Kolbasov O

Arjun Mishra - New Apache Sentry Committer

It is my pleasure to introduce a new Apache Sentry committer who is very familiar to people on this list - Arjun Mishra! Welcome Arjun! - Alex

Re: Review Request 67846: SENTRY-2283 Multiple versions of metrics on the classpath causes Sentry to not startup

/hdfs/PathDeltaRetriever.java Line 20 (original), 20 (patched) <https://reviews.apache.org/r/67846/#comment288761> Shouldn't this be done automatically by the shading plugin? - Alexander Kolbasov On July 6, 2018, 7:06 p.m., Steve Moist

Re: Thoughts on using lombok?

Brian, This seems interesting. How does it interplay with IntelliJ/Eclipse ability to find all usages of the method - will we still be able to find all references to constructors/getters/setters e.t.c. ? > On May 24, 2018, at 12:54 PM, Brian Towles wrote: > > Howdy all,

Re: Review Request 67174: SENTRY-2156: Update provider-db backend code to grant privileges to user

if you modify the if statement above: ```if (...) { return true; } // handle the more complicated case ``` - Alexander Kolbasov On May 17, 2018, 1:28 a.m., Na Li wrote: > > --- > Thi

Re: Sentry Release Schedule for FGP and ABAC

branch. I don’t want everyone to ignore it for a few months and then > start > > re-reveiwing with it as we merge it back into master when we get to the > end. > > > > Does this sound good to the community? > > > > > On Apr 30, 2018, at 6:35 PM, Alexander Kolbasov <a

Organizing JIRAs as subtasks for ABAC and FGP

It is rather difficult to navigate multiple JIRAs associated with ABAC and FGP. I wold suggest moving all jiras as subtask of two uber-jiras - one for FGP and one for ABAC. What do you think? - Alex

Re: Sentry Release Schedule for FGP and ABAC

Stephen, a lot depends on your plans in terms of breaking functionality. For example, one of the reasons Sentry HA was developed on a feature branch was because it was a serious change in architecture and in broke functionality for a while. I think some of the merge problems which Sergio referred

Re: HMS catalogs and Sentry

n HMS? I was looking at the > JIRA > > > but I don't see how catalogs will be used. > > > > > > Nevertheless, if HMS is going to support catalogs, then we should > support > > > them when we decide to move to Hive 3.0 at some point. > > > Should we

Re: Quick tips for code reviews

+1 > On Apr 30, 2018, at 08:25, Sergio Pena wrote: > > Hey All, > > I just want to share with the community about some helpful tips when > submitting patches for review that are useful for reviewers: > > - Add a link to the review board on the JIRA related to the

Re: HMS catalogs and Sentry

ttps://www.cloudera.com/> > > [image: Cloudera on Twitter] <https://twitter.com/cloudera> [image: > Cloudera on Facebook] <https://www.facebook.com/cloudera> [image: Cloudera > on LinkedIn] <https://www.linkedin.com/company/cloudera> > --

HMS catalogs and Sentry

Hive 3 introduced the notion of catalog. What do people think about supporting it in Sentry as well? At some point we will move to Hive-3 and then it will become a requirement I guess. - Alex

Re: Review Request 66787: SENTRY-2212 smart-apply-patch.sh isn't so smart, won't apply changes when files have been moved or renamed

> On April 25, 2018, 4:07 p.m., Anthony Young-Garner wrote: > > dev-support/smart-apply-patch.sh > > Line 44 (original) > > > > > > Do we not still want to detect this situation (only new files) and try > > applying

Re: sentry-provider-db and circular dependencies

In my experience IntelliJ is your friend here - it is really good at this kind of refactoring. On Wed, Apr 18, 2018 at 1:54 PM, Stephen Moist <mo...@cloudera.com> wrote: > Ok, I’ll work against that idea then with the sentry-service module. > > > On Apr 18, 2018, at 3:45 PM,

Re: sentry-provider-db and circular dependencies

It was done earlier as sentry-1205. The code is still in the got history. We didn't include the change - it was too difficult to merge with ha branch. > On Apr 18, 2018, at 12:57, Stephen Moist wrote: > > Great, I’ll get started on that. Is there a better name I should

Re: Using a different Command line tool

I think this should be fine as long as we don't use both. BTW, do you know that there is also an interactive CLI - it would be nice if you add support there as well. - Alex On Mon, Apr 9, 2018 at 11:05 AM, Stephen Moist wrote: > Hey all, I’ve been prototyping out the ABAC

Re: about rename table across database

--- >> >> On Tue, Apr 10, 2018 at 6:49 PM, Na Li <lina...@cloudera.com> wrote: >> >> > Sasha, >> > >> > We can. And I added the test case in e2e tests, and it works. >> > >> > On Tue, Apr 10, 2018 at 5:34 PM

Re: about rename table across database

on Facebook] <https://www.facebook.com/cloudera> [image: >> Cloudera >> on LinkedIn] <https://www.linkedin.com/company/cloudera> >> ------ >> >> On Tue, Apr 10, 2018 at 6:49 PM, Na Li <lina...@cloudera.com> wrote: >> >&g

Re: about rename table across database

I think you are right - there is no reason to do that. I am not sure whether we can actually have changed DB name in ALTER TABLE event at all. On Tue, Apr 10, 2018 at 12:58 PM, Na Li wrote: > Sasha, > > > In FullUpdateModifier.alterTable(), why did you have the section

Re: Review Request 66336: SENTRY-2190: Have verbose debug logs in CounterWait class

r-db/src/main/java/org/apache/sentry/provider/db/service/persistent/CounterWait.java Line 213 (original), 216 (patched) <https://reviews.apache.org/r/66336/#comment280878> Again, "returning from wait 125" is confusing message. - Alexander Kolbasov On March 29, 2018, 5:

Re: Review Request 66336: SENTRY-2190: Have verbose debug logs in CounterWait class

ning from wait for {}"? sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/service/persistent/CounterWait.java Line 243 (original), 249 (patched) <https://reviews.apache.org/r/66336/#comment280795> What's wrong with the original message? - Alexander Kol

Re: Separating thrift api out (SENTRY-2188)

I have some concerns there. It is, indeed, a problem every time you need to do thrift changes, but so fat this was usually a rare event. Having thrift as a requirement makes life inconvenient - for example the thrift version that I have on my laptop is 0.11.0 and I have to do something special to

Hive changes to object ownership

Just saw this: https://issues.apache.org/jira/browse/HIVE-19058 May be this has some relevance for FGP.

Re: Fine grained privilege changes in Apache Sentry

available in Sentry 2.1, I think it makes sense to > continue with that path unless there are other features planned for 2.1 and > we cannot guarantee to have FGP ready by 2.1? > > On Mon, Mar 26, 2018 at 4:28 PM, Alexander Kolbasov <ak...@cloudera.com> > wrote: > > > T

Fine grained privilege changes in Apache Sentry

There is one thing I'd like to clarify. What is the plan for all the work around introducing fine-grained permissions managed by Sentry - do you intend to do the work in a feature branch and merge the whole thing when it is ready - similar to the way Sentry HA was done or you intend to directly

Re: Review Request 66146: SENTRY-2184: Performance Issue: MPath is queried for each MAuthzPathsMapping in full snapshot

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/66146/#review199698 --- Ship it! Ship It! - Alexander Kolbasov On March 21, 2018, 4

Alternative Sentry architecture

I was thinking about possible alternatives to the way Sentry works with HMS. What do people think of Sentry being a proxy to HMS thrift protocol? This way it can see all HMS requests and responses and can enforce HMS-level privileges without any plugins (Hiveserver2 still needs plugins) and it

Re: Review Request 65704: SENTRY-2143: Table renames should synchronize with Sentry

> On Feb. 22, 2018, 6:56 p.m., Alexander Kolbasov wrote: > > sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/metastore/SentrySyncHMSNotificationsPostEventListener.java > > Lines 146 (patched) > > <https://reviews.apache.org/r/65

Re: [DISCUSS] Adjustments to the commit process

reasonable to me as long as they can get someone to do the commit > > in a reasonable timeframe. I wouldn’t want to have to wait days for it > to > > get in after it has been properly reviewed. > > > > > On Feb 22, 2018, at 12:22 PM, Alexander Kolbasov <ak...@clo

Re: Review Request 65704: SENTRY-2143: Table renames should synchronize with Sentry

413 (patched) <https://reviews.apache.org/r/65704/#comment278247> What does this have to do with the JIRA that you are fixing? Looks like some kinnd of separate issue. - Alexander Kolbasov On Feb. 22, 2018, 6:55

[DISCUSS] Adjustments to the commit process

Hello everyone, I would like to propose an adjustment to the commit process in Sentry project. The idea is to require that commit should not be done by the person providing the change but by some other committer. This committer's responsibility is to ensure that all code review concerns were

[DISCUSS] Allowing Java 8 features in Sentry

Hello Sentry hackers, We are now compiling Sentry with Java 8. I would like to propose allowing Java 8 features in Sentry code. As of now it is difficult to enforce strict Java 7 compatibility, so we may just as well embrace the reality and start using Java 8 which hopefully will improve the

Re: Review Request 65268: SENTRY-1904: TransactionManager should limit the max time spent by transaction retry

ent278192> 30 sec is too much for this test - it delays the whole test for 30 sec. Can you test it with the whole test taking ~2 seconds? - Alexander Kolbasov On Feb. 12, 2018, 11:50 p.m., kalyan kumar kalv

Re: Review Request 65704: SENTRY-2143: Table renames should synchronize with Sentry

> On Feb. 18, 2018, 5:29 a.m., Alexander Kolbasov wrote: > > sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/metastore/SentrySyncHMSNotificationsPostEventListener.java > > Line 96 (original), 96 (patched) > > <https://reviews.apache.org/r/65

Re: Review Request 65642: SENTRY-2141: Sentry Privilege TimeStamp is not converted to grantTime in HivePrivilegeInfo correctly

/sentry/binding/util/SentryAuthorizerUtil.java Lines 227 (patched) <https://reviews.apache.org/r/65642/#comment277920> It is better to use TimeUnit class for time conversions - Alexander Kolbasov On Feb. 14, 2018, 12:51 a.m., Na Li

Fwd: Travel Assistance applications open. Please inform your communities

> Begin forwarded message: > > From: Gavin McDonald > Subject: Travel Assistance applications open. Please inform your communities > Date: February 14, 2018 at 1:34:11 AM PST > To: travel-assista...@apache.org > Reply-To: priv...@sentry.apache.org > Reply-To:

Re: Review Request 65268: SENTRY-1904: TransactionManager should limit the max time spent by transaction retry

= "Retried for " + maxRetryDurationMills + " milliseconds. Giving up " + ex.getMessage(); LOGGER.error(message, ex); throw new Exception(message, ex); } } ` -

Re: Review Request 65268: SENTRY-1904: TransactionManager should limit the max time spent by transaction retry

on has a limit of 500 ms but you only retried for 283 milliseconds, you could easily try harder. - Alexander Kolbasov On Feb. 5, 2018, 3:02 p.m., kalyan kumar kalvagadda wrote: > > --- > This is an automatically generated e-mail.

Re: Review Request 65268: SENTRY-1904: TransactionManager should limit the max time spent by transaction retry

apache.org/r/65268/#comment276696> Do you need space after `giving up` ? - Alexander Kolbasov On Feb. 5, 2018, 3:02 p.m., kalyan kumar kalvagadda wrote: > > --- > This is an automatically generated e-mail. To reply

Re: Review Request 65268: SENTRY-1904: TransactionManager should limit the max time spent by transaction retry

ain/java/org/apache/sentry/provider/db/service/persistent/TransactionManager.java Lines 232 (patched) <https://reviews.apache.org/r/65268/#comment276690> Given exponential nature, how quickly do we usually reach this point? - Alexander Kolbasov On Feb. 5, 2018, 3:02 p.m., kalyan kuma

Please welcome Kalyan Kalvagadda to Apache PMC!

Please welcome Kalyan Kalvagadda who is joining Apache Sentry PMC! - Alex

Re: Review Request 65268: SENTRY-1904: TransactionManager should limit the max time spent by transaction retry

ntryStore.java Lines 3496 (patched) <https://reviews.apache.org/r/65268/#comment276416> Please provide more information - how much longer did it take? Was it one nanosecond or 2 hours? - Alexander Kolbasov On Jan. 31, 2018, 12:30 a.m., kalyan kumar kalvagadda wrote: > > --

Re: How to run bin/run_sentry.sh

only sentry-site.xml I found is shown in the picture below, it > seems still something is missing. > > Thanks! > > 2018-01-30 18:34 GMT-06:00 Alexander Kolbasov <ak...@cloudera.com>: > >> The way run_sentry works - it actually runs mvn exec:java which builds >>

Re: Issues with Codahale/Dropwizard metrics dependencies

Hi Liam, I don’t think there is a particular reason other then historical development. I think we should just align with whatever version is used by majority of other components or just use the latest version. I don’t see any reason to run with old version. - Alex > On Feb 1, 2018, at 12:55

Re: How to run bin/run_sentry.sh

ownership of files? > Also, Lina, I have run the command but it seems something removed the > JAVA_HOME, please see the attachment. > > 2018-01-12 16:57 GMT-06:00 Alexander Kolbasov <ak...@cloudera.com>: > >> Running it via studio is not the best idea since it will chang

Re: Review Request 65268: SENTRY-1904: TransactionManager should limit the max time spent by transaction retry

ment explaining what are you testing here. Looks like the name is not telling the truth - you are testing something complicated about notifications. What you really need is a test that verifies that your failed transactions fail more or less within allotted time, but this test doesn't t

Question about user-level privileges

I am wondering what is the relationship between "users" as defined in Sentry and users as defined in Unix or LDAP or Active Directory. Should it be allowed to assign permissions to a user that doesn't exist? Should there be any validation if users? Should these be treated together or

Re: [DISCUSS] Sentry roadmap after 2.0

ased privilege. I will add more > sub-tasks > > to it > > > > On Thu, Jan 25, 2018 at 1:42 PM, Alexander Kolbasov <ak...@cloudera.com> > > wrote: > > > >> Agreed, making 2.1 with just user-level privileges improvements (plus > set >

Re: [DISCUSS] Sentry roadmap after 2.0

Agreed, making 2.1 with just user-level privileges improvements (plus set of accumulated bug fixes) sounds reasonable. On Thu, Jan 25, 2018 at 11:41 AM, Alexander Kolbasov <ak...@cloudera.com> wrote: > Looks like we have a consensus of doing user-level privileges improvements > fo

Re: [DISCUSS] Sentry roadmap after 2.0

to user. Ideally, user-based-privileges feature should be > >> allowing > >> >administrator to grant privileges to individual users directly. > >> > - I'm working on this to come up with a scope doc. > >> > 2. Currently sentry stores only grant pr

Re: [DISCUSS] Sentry roadmap after 2.0

or wants to grant role with select > > on > > > the > > > all tables in a database except for couple to them, he needs to > > > individual > > >select privileges for each table. > > > 1. Implementation should let you add a grant privilege

Re: [DISCUSS] Sentry roadmap after 2.0

n database > > and revokes privileges on the tables with in that database, > > 2. This needs new look into privilege model that sentry currently > > has. > > > > > > -Kalyan > > > > > > -Kalyan > > > > On Thu, Jan 25, 2018 at

Re: [DISCUSS] Sentry roadmap after 2.0

gt; On Thu, Jan 25, 2018 at 11:58 AM, Alexander Kolbasov <ak...@cloudera.com> > wrote: > > > Now that we have Sentry 2.0 release, I think it is a good time to step > back > > from fixing bugs and immediate problems and start discussions on roadmap > > for Sentry going

[DISCUSS] Sentry roadmap after 2.0

Now that we have Sentry 2.0 release, I think it is a good time to step back from fixing bugs and immediate problems and start discussions on roadmap for Sentry going forward. Do we want to just keep it as is and improve things here and there or we want to add new features? What do people think?

Re: Review Request 65268: SENTRY-1904: TransactionManager should limit the max time spent by transaction retry

s JIRA is moot and we shouldn't fix it in the first place. - Alexander Kolbasov On Jan. 23, 2018, 11:40 p.m., kalyan kumar kalvagadda wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://re

Re: Review Request 65268: SENTRY-1904: TransactionManager should limit the max time spent by transaction retry

ed sleep time. You need to make sure that you never sleep longer then the remaining time left. - Alexander Kolbasov On Jan. 23, 2018, 11:40 p.m., kalyan kumar kalvagadda wrote: > > --- > This is an automatically generated e-mai

Re: How to run bin/run_sentry.sh

ervice", but seems not working. >> >> 2018-01-12 14:56 GMT-06:00 Alexander Kolbasov <ak...@cloudera.com>: >> >>> It is easy. Your current directory should be within the got repo and the >>> actual script can be anywhere. Just run it with whatever a

Re: How to run bin/run_sentry.sh

It is easy. Your current directory should be within the got repo and the actual script can be anywhere. Just run it with whatever argument you want to pass to main. The script users maven to build and run sentry so it doesn't depend on any class path. On Fri, Jan 12, 2018 at 12:30 Xinran Yu

Re: Review Request 64661: SENTRY-1944: Optimize DelegateSentryStore.getGroupsByRoles()

> On Dec. 18, 2017, 6:55 p.m., Alexander Kolbasov wrote: > > sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/generic/service/persistent/DelegateSentryStore.java > > Line 267 (original), 271 (patched) > > <https://reviews.apache.org/r/64

Re: [VOTE] - Release Apache Sentry 1.7.1

Thanks Colm! Happy new year! On Sun, Dec 24, 2017 at 05:31 Colm O hEigeartaigh <cohei...@apache.org> wrote: > With 3 binding +1 votes, and no other votes, this vote passes. I'll do the > release. > > Colm. > > On Wed, Dec 20, 2017 at 5:18 PM, Alexander Kolbasov <

Re: Review Request 64661: SENTRY-1944: Optimize DelegateSentryStore.getGroupsByRoles()

> On Dec. 18, 2017, 6:55 p.m., Alexander Kolbasov wrote: > > sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/generic/service/persistent/DelegateSentryStore.java > > Line 267 (original), 271 (patched) > > <https://reviews.apache.org/r/64

Re: [VOTE] - Release Apache Sentry 1.7.1

+1 On Wed, Dec 20, 2017 at 7:04 AM, Sergio Pena wrote: > Agree. I checked the rest of the release (checksums, gpg, build) and it is > good. > > +1 > > On Wed, Dec 20, 2017 at 2:51 AM Colm O hEigeartaigh > wrote: > > > Yeah I saw that afterwards +

Re: Review Request 64661: SENTRY-1944: Optimize DelegateSentryStore.getGroupsByRoles()

e which does that. - Alexander Kolbasov On Dec. 18, 2017, 4:36 p.m., Arjun Mishra wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://re

Re: Review Request 64259: SENTRY-1572 SentryMain() shouldn't dynamically load tool class

> On Dec. 15, 2017, 7:51 p.m., Alexander Kolbasov wrote: > > sentry-core/sentry-core-common/src/main/java/org/apache/sentry/SentryMain.java > > Line 45 (original), 49 (patched) > > <https://reviews.apache.org/r/64259/diff/2/?file=1912668#file1912668line49> >

Re: Review Request 64259: SENTRY-1572 SentryMain() shouldn't dynamically load tool class

t is Command, not Object sentry-core/sentry-core-common/src/main/java/org/apache/sentry/SentryMain.java Lines 126 (patched) <https://reviews.apache.org/r/64259/#comment272654> Add `break` - Alexander Kolbasov On Dec. 11, 2017, 8:03 p.m., Xinran Tinney wrote: > > --

Re: Review Request 64545: SENTRY-2078: Have sentry server print an obvious INFO level log message when it becomes the writer

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/64545/#review193753 --- Ship it! Ship It! - Alexander Kolbasov On Dec. 14, 2017, 1

Re: Review Request 64545: SENTRY-2078: Have sentry server print an obvious INFO level log message when it becomes the writer

> On Dec. 13, 2017, 6:42 p.m., Alexander Kolbasov wrote: > > sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/service/thrift/LeaderStatusMonitor.java > > Line 281 (original), 282 (patched) > > <https://reviews.apache.org/r/64545/diff/5-6/?file=19

Re: 1.7.1 version in JIRA

Done On Wed, Dec 13, 2017 at 6:26 AM, Colm O hEigeartaigh wrote: > Can someone add a 1.7.1 version in JIRA please? > > Colm. > > > -- > Colm O hEigeartaigh > > Talend Community Coder > http://coders.talend.com >

Re: Review Request 64545: SENTRY-2078: Have sentry server print an obvious INFO level log message when it becomes the writer

/sentry/service/thrift/LeaderStatusMonitor.java Line 281 (original), 282 (patched) <https://reviews.apache.org/r/64545/#comment272308> Note that in single node mode none of these are relevant since it is always a leader. - Alexander Kolbasov On Dec. 13, 2017, 5:45 p.m., Arjun Mishra

Re: Review Request 63596: SENTRY-1951 - Old SentryStore.retrieveFullPathsImage() should be removed

> On Dec. 12, 2017, 1:26 a.m., Alexander Kolbasov wrote: > > sentry-hdfs/sentry-hdfs-service/src/test/java/org/apache/sentry/hdfs/TestImageRetriever.java > > Line 57 (original), 56 (patched) > > <https://reviews.apache.org/r/63596/diff/6/?file=1

Re: Review Request 64545: SENTRY-2078: Have sentry server print an obvious INFO level log message when it becomes the writer

8 (patched) <https://reviews.apache.org/r/64545/#comment272156> Drop incarnationId from here - Alexander Kolbasov On Dec. 12, 2017, 5:10 p.m., Arjun Mishra wrote: > > --- > This is an automatically generated

Re: Review Request 63596: SENTRY-1951 - Old SentryStore.retrieveFullPathsImage() should be removed

values. - Alexander Kolbasov On Dec. 11, 2017, 9:02 p.m., Arjun Mishra wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.

Re: [RESULT][VOTE] Release Sentry version 2.0.0

Thanks Kalyan! On Thu, Dec 7, 2017 at 11:36 AM, Kalyan Kumar Kalvagadda < kkal...@cloudera.com> wrote: > Voting is now closed and has passed with the following tally, > > Binding +1s: Sergio Pena, Alexander Kolbasov, Colm o hEigeartaigh > > > Thanks to everyone

Re: Review Request 64392: SENTRY-2092: Drop Role log message shows Creating role

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/64392/#review193060 --- Ship it! Ship It! - Alexander Kolbasov On Dec. 6, 2017, 11

Re: [VOTE] Sentry Release 2.0.0 RC3

+1 On Tue, Dec 5, 2017 at 9:01 AM, Colm O hEigeartaigh wrote: > +1 from me. Checked digests and signatures, built the tag and source > distribution, tested the binary distribution. > > Colm. > > On Tue, Dec 5, 2017 at 4:30 PM, Sergio Pena > wrote:

Re: Review Request 64392: SENTRY-2092: Drop Role log message shows Creating role

nding/hive/authz/DefaultSentryAccessController.java Line 144 (original), 144 (patched) <https://reviews.apache.org/r/64392/#comment271549> Change to `"Sentry failed to drop role: "` - Alexander Kolbasov On Dec.

Re: Review Request 63881: SENTRY-2040: When getting Snapshots from HMS we need more logging around cases when a snapshot is not being received

e/sentry/service/thrift/SentryHMSClient.java Lines 209 (patched) <https://reviews.apache.org/r/63881/#comment271316> It is visuall better to rearrange these to show the lower ID first. It would be nice to see something like `received non-consequitive event sequence 10, 12` - Alexander Kol

Re: [VOTE] Release Sentry 2.0.0 RC2

Would you mind submitting the vote on Monday? This will give people 72 working hours to look at it. Thanks, - Alex. > On Dec 1, 2017, at 11:11 PM, Kalyan Kumar Kalvagadda > wrote: > > This is the release of Apache Sentry, version 2.0.0. > > It fixes the following

Re: Review Request 64273: SENTRY-2084: Exclude javax.jms:jms from sentry distribution

) <https://reviews.apache.org/r/64273/#comment270851> Please add comment explaining why this is excluded - Alexander Kolbasov On Dec. 1, 2017, 11:19 p.m., kalyan kumar kalvagadda wrote: > > --- > This is an automatically g

Re: Review Request 64241: SENTRY-2081: Update the LICENSE.txt with the license information of distributed jars

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/64241/#review192594 --- Ship it! Ship It! - Alexander Kolbasov On Dec. 1, 2017, 11

Re: Review Request 64241: SENTRY-2081: Update the LICENSE.txt with the license information of distributed jars

/64241/#comment270832> Is there anything that checks correctness of pointers? What would happen if release manager forgets to add the file? pom.xml Lines 734 (patched) <https://reviews.apache.org/r/64241/#comment270821> This looks like an unrelated change - can you move this to a diffe

Re: Review Request 64230: SENTRY-2082: Exclude javax.servlet-3.0.0.v201112011016.jar from Sentry dist

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/64230/#review192423 --- Ship it! Ship It! - Alexander Kolbasov On Nov. 30, 2017, 11

Re: [VOTE] Release Sentry version 2.0.0

t; Does anyone has a better suggestion? > >>> > > >>> > -Kalyan > >>> > > >>> > On Wed, Nov 29, 2017 at 12:32 PM, Sergio Pena < > >>> sergio.p...@cloudera.com> > >>> > wrote: > >>> > > >

Re: [VOTE] Release Sentry version 2.0.0

t problems do you guys have with the Web UI? > > - Sergio > > On Wed, Nov 29, 2017 at 6:23 PM, Alexander Kolbasov <ak...@cloudera.com> > wrote: > > > When I disabled Web UI the problem went away, so it is directly related > to > > Web UI. > > > > On We

Re: [VOTE] Release Sentry version 2.0.0

< > kkal...@cloudera.com> wrote: > > > Sergio, > > > > I know that you tried to start sentry standalone, Did you see this issue? > > > > > > -Kalyan > > > > On Wed, Nov 29, 2017 at 12:16 PM, Alexander Kolbasov <ak...@cloudera.com > &g

Re: [VOTE] Release Sentry version 2.0.0

I tried to start Sentry server on Mac and got a weird error . I am running from the dist directory that I just built with mvn clean install on the 2.0.0 branch. 17/11/29 10:13:25 ERROR thrift.SentryService: Error starting server java.lang.SecurityException: class "javax.servlet.DispatcherType"'s

Re: [VOTE] Release Sentry version 2.0.0

Kalyan, Thank you for posting Release 2.0 candidate. What kind if testing would you recommend for us to perform to vote Yes/No? Can you post some recommendations, please? - Alex On Tue, Nov 28, 2017 at 4:38 PM, Kalyan Kumar Kalvagadda < kkal...@cloudera.com> wrote: > This is the release of

Re: Review Request 63881: SENTRY-2040: When getting Snapshots from HMS we need more logging around cases when a snapshot is not being received

424 (patched) <https://reviews.apache.org/r/63881/#comment270166> Message can be quite big - do we really want to log it? - Alexander Kolbasov On Nov. 29, 2017, 5:28 p.m., Arjun Mishra wrote: > > --- > This is an aut

2.0 release and SENTRY-1812

Colm, do you plan to include SENTRY-1812 in 2.0 release?

Re: Review Request 64002: SENTRY-2068: Disable HTTP TRACE method from the Sentry Web Server

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/64002/#review191759 --- Ship it! Ship It! - Alexander Kolbasov On Nov. 22, 2017, 3

Avoiding merge commits to master.

This is a reminder for developers to avoid merge commits to master. There might be cases where this is unavoidable, please send a note here if you think you MUST have a merge commit. Otherwise, please make an effort co collapse all intermediate changes/merges and create a single commit per

Re: Review Request 63874: SENTRY-1812 - Provide interactive Sentry CLI

ines 291 (patched) <https://reviews.apache.org/r/63874/#comment269556> Use switch() for comparing against enums - Alexander Kolbasov On Nov. 20, 2017, 3:05 p.m., Colm O hEigeartaigh wrote: > > --- > This is an automatically ge

Re: Review Request 63975: SENTRY-2066: DB name is not set for AlterTable

/sentry/binding/hive/HiveAuthzBindingHook.java Lines 283 (patched) <https://reviews.apache.org/r/63975/#comment269413> Why do we need an extra boolean Can we just check for currDB == null ? Or it isn't null in this case? - Alexander Kolbasov On Nov. 21, 2017, 3:32 a.m., Na Li

Interesting coincedence

1. SENTRY-2000 is"Cut 2.0.0 branch" !

Re: Cutting sentry 2.0.0 off master

We can still create 2.0 branch and just be more selective about what goes there - we may choose to skip some commits from master. - Alex. On Fri, Nov 17, 2017 at 12:24 PM, Sergio Pena wrote: > +1 > > Sounds good Kalyan. I'm still finding the test failures and seems

Re: Shading of conflicting dependencies

> > > wrote: > > > > > >> +1 > > >> > > >> I like the idea. It's hard to upgrade our libraries to newer ones when > > >> other components break due to Sentry being a plugin. I was once > thought > > of > > >&

Re: Shading of conflicting dependencies

Agreed, this would be a very useful thing to do. I remember spending a lot of time trying to make Sentry work with DataNucleus 4 - the problem was that e2e tests combine Sentry with Hive in the same JVM and this created a conflict on the DataNucleus libraries and test failures. Looking at the

  1   2   3   4   5   6   7   8   >