Date: Tue, 19 Mar 2024 08:09:05 +0000 (UTC) Message-ID: <1072312322.55984.1710835745895@cwiki-he-fi.apache.org> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_55983_1925366241.1710835745895" ------=_Part_55983_1925366241.1710835745895 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html
All of these are hooks in var= ious services, where there is a Sentry client plugged in as a hook. Please = note that, below hooks are for V1:
Executed at beginning of each new ses= sion: All beeline commands
Hive.server2.session.hook
=3Dorg.apache.sentry.binding.hive.Hiv= eAuthzBindingSessionHook
Metastore hook class for further filtering the metadata read results on = client side: Show tables/databases through beeline
hive.metastore.filter.hook
=3Dorg.apache.sentry.binding.metastore.SentryMetaStoreFilterHook
For Grant/Revoke commands: Validation and authz (SentryGrantRevokeTask)<= /p>
hive.security.authorization.task.factory
=3Dorg.apache.sentry.binding.hive.SentryHiveAuthorizationTaskFactoryImpl=
Other:
SentryHiveMetaStoreClient: Filters (TODO: What is its intended purpose a= s compared to SentryMetaStoreFilterHook?)
hive.metastore.pre.event.listeners
=3Dorg.apache.sentry.binding.metastor= e.MetastoreAuthzBinding
HMS writes, adds ip/op hierarchies an= d calls authz binding
hive.metastore.event.listeners=
=3Dorg.apache.sentry.binding.metastor= e.SentryMetastorePostEventListener
For propagating create/drop/rename events
For path updates for HDFS plugin
sentry.metastore.plugins
=3Dorg.apache.sentry.hdfs.MetastorePl= ugin (called by PostEventListener)
For path updates for hdfs sync
dfs.namenode.authorization.provider.c= lass
=3Dorg.apache.sentry.hdfs.SentryAutho= rizationProvider