发布于 2014-08-20 00:20:33 | 265 次阅读 | 评论: 0 | 来源: 网友投递
Apache Sentry
Apache Sentry 是一个加强的细粒度的基于角色的授权系统，针对存储在 Hadoop 集群中的数据和元数据。
Apache Sentry 是一个加强的细粒度的基于角色的授权系统，针对存储在 Hadoop 集群中的数据和元数据。
Apache Sentry 1.4.0-incubating 发布，此版本现已提供下载，更多内容请看发行说明。
** Bug 修复
* [SENTRY-118] - cast udf should be added to sentry udf whitelist for hive
* [SENTRY-131] - bin/sentry script doesn't find config-tool.sh under some circumstances
* [SENTRY-133] - Alter table create partition if not exists - results in error
* [SENTRY-161] - Sentry master branch is trying to download Hadoop tarball from nonexisting URL
* [SENTRY-162] - Cleanup DB store privilege metadata on Hive DDL statements
* [SENTRY-166] - Sentry does not accept URIs with an equals sign (=) in path. Fails with llegalArgumentException: Invalid key value
* [SENTRY-169] - JAAS login options not compatible with IBM JDK
* [SENTRY-172] - config-tool.sh is missing from master branch
* [SENTRY-174] - Sentry should not package hadoop, hive and other jars
* [SENTRY-175] - sentry script throws error for the dbstore service invocation
** 改进
* [SENTRY-106] - Make solr testing work against apache 4.7 version
* [SENTRY-193] - Add schematool for creating Sentry store schema from the SQL scripts
* [SENTRY-211] - Do the user: group lookup in the Sentry db policy server
* [SENTRY-258] - Increase field PRIVILEGE_NAME to 4000 characters to enable long URIs
* [SENTRY-293] - Create a new mvn cluster test profile for provider db tests
* [SENTRY-303] - Allow users to grant/revoke SELECT/INSERT to ALL tables in a Database
* [SENTRY-333] - Add conf directory to sentry distribution
* [SENTRY-361] - Sentry server should use sentry-site.xml in conf directory by default
** 新特性
* [SENTRY-3] - Create a diagnostics tool for configuration validation
* [SENTRY-37] - Implement a DB backed policy store
* [SENTRY-115] - Give bindings the ability to access the group mappings
* [SENTRY-157] - Support filter pushdown in DB Store client to reduce data transfer from DB Store service
* [SENTRY-158] - Hive bindings should enable MR level ACLs for session user
* [SENTRY-165] - Implement createShowRolesTask() in SentryHiveAuthorizationTaskFactoryImpl
* [SENTRY-184] - Add Sentry service APIs to query roles and privileges
* [SENTRY-199] - Create tool that will convert policy file into into DB store
* [SENTRY-215] - SHOW GRANT ROLE xxx ON [SERVER, DATABASE, TABLE, URI] xxx
* [SENTRY-216] - Support SHOW CURRENT ROLES