I also think it's a good idea, although I'm not sure exactly how it would work. The low(er) hanging fruit is to do what is currently supported with Hive and Impala using HBase as a backend (except using Accumulo). There is some work going on with getting Impala on Accumulo in a few places, but I have no idea about when or if that will see the light of day. There was some work years ago on making Accumulo work with Hive, but I don't know that it was ever finished or released (not as far as I know).
This approach makes sense, given that Sentry has SQL-style RBAC semantics. However applying Sentry to a "native" Accumulo mutation seems like it would be a little bit trickier to implement. It is the case that Sentry has support for Cloudera Search (index level right now). The semantics for search based permissions are different from the original SQL permissions, so it's not incomprehensible to me that additional semantics could be added to support BigTable type actions. But I don't know of anyone working on that right now. Michael On Thu, May 1, 2014 at 9:55 AM, Christopher <[email protected]> wrote: > I have not, but I think it's a great idea. > > -- > Christopher L Tubbs II > http://gravatar.com/ctubbsii > > > On Wed, Apr 30, 2014 at 10:41 PM, Arshak Navruzyan <[email protected]> > wrote: > > Has anyone tried to integrate Accumulo's authorizations with Apache > Sentry? > -- Michael Ridley <[email protected]> Solutions Architect Cloudera Government Solutions Inc.
