Goals
Explore CDAP entities and integrate them with hue
Use hue interface to manage ACL for sentry
Checklist
- User stories documented (Rohit/Bhooshan)
- User stories reviewed (Nitin)
- Design documented (Rohit/Bhooshan)
- Design reviewed (Andreas)
- Feature merged (Rohit/Bhooshan)
- Examples and guides (Rohit)
- Integration tests (Bhooshan)
- Documentation for feature (Rohit/Bhooshan)
- Blog post
User Stories
- As a CDAP system, I should be able to integrate with Apache Sentry for fine-grained role-based access controls of select CDAP operations
- As a CDAP admin, I should be able to easily configure Sentry to work with CDAP on different type of cluster (ex: CDH, CM cluster etc).
- As a CDAP admin, I should be able to create/update/delete roles in Apache Sentry
- As a CDAP admin, I should be able to add users/groups to roles in Apache Sentry
- As a CDAP admin, I should be able to turn authorization on/off easily for entire CDAP instance
- As a CDAP system, I should be able to authorize the following requests
- Namespace create/update/delete
- Application deployment
- Program start/stop
- Stream read/write (Not Implemented in 3.4)
These operations are a subset that represents the various 'kinds' of operations allowed in CDAP
explore all in cdap hue
configure cdap
acl managment