Uploaded image for project: 'Sentry (Retired)'
  1. Sentry (Retired)
  2. SENTRY-398 Create the generic authorization model in Sentry
  3. SENTRY-405

Adding a general jdo access layer(sentrystore) to support the new authorization model

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.5.0
    • 1.5.0
    • None
    • None

    Description

      Currently the sentryStore in Sentry only supports database structure authorize model such as Hive/Impala, in order to support more components like Solr or other no database authorization
      model component. It needs to create a general store to communicate with outside, the structure of privilege model should be hidden. The general store uses interface to transfer the needed information of privilege, the example codes are as following:

      public interface PrivilegeReader {
  public List<? extends Authorizable> getAuthorizables();
  public String getAction();
  public String getComponent();
  public String getService();
  public String getScope();
  public Boolean withGrantOption();
}

public interface Authorizable {
  public String getName();
  public String getTypeName();
}

      Attachments

        1. SENTRY-405.patch
          143 kB
          shenguoquan
        2. SENTRY-405.002.patch
          115 kB
          shenguoquan
        3. SENTRY-405.003.patch
          115 kB
          shenguoquan
        4. SENTRY-405.004.patch
          112 kB
          shenguoquan

        Issue Links

          depends upon

          Sub-task - The sub-task of the issue SENTRY-400 Extending sentry metadata infrastructure to support the generic authorization model

          • Major - Major loss of function.
          • Resolved
          is depended upon by

          Sub-task - The sub-task of the issue SENTRY-404 Extending Sentry thrift interface and adding a processor for generic authorization model

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link Review board link

          Activity

            People

              guoquan shenguoquan
              guoquan shenguoquan
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: