Reply
Explorer
Posts: 19
Registered: ‎11-26-2015

KUDU-recordServices: Row Level security

Hello,

 

I would like tyo apply row Level security on KUDU tables. I checked the documentations of recordServices it sounds to me that the unique solution would be to create dedicated view per Role.

Am I right? Or is the feature really implemented in recordServices?

 

Thanks 

 

Johann

Cloudera Employee
Posts: 2
Registered: ‎01-30-2014

Re: KUDU-recordServices: Row Level security

The features you mentioned are being implemented in coming months, in this order:

1) RecordService support for Kudu 

2) RecordService/Sentry support for row-level permissions 

 

You are correct that once the first item above is completed, you could create separate views that include different rows from a table - then use Sentry to assign permissions to separate roles for each view.   RecordService will enforce these permissions.   Once the second item is completed, there could be a single view which returns different sets of rows depending on the role of the user performing the query.

Explorer
Posts: 19
Registered: ‎11-26-2015

Re: KUDU-recordServices: Row Level security

Hello,

 

any news regarding those features. In the emantime I have seen that Ranger implemented it.

any news are welcome.

 

Thanks

Johann

Cloudera Employee
Posts: 50
Registered: ‎09-28-2015

Re: KUDU-recordServices: Row Level security

Hi Johann,

I'm sorry to report there is no news on this feature.

-Todd
Announcements
Unanswered Topics
No posts to display.