Apache Sentry

What do you like best?

Secure, fine-grained, role-based authorization

Multi-tenant administration

Role-based authorization

What do you dislike?

In some cases, the authorization is not as fine-grained as I could wish. Some examples:

If you give somebody a right to create a table in Hive database, then this user can also drop any table in this database. It would useful to user can only drop tables that she is the owner of, similarly to what “sticky-bit” provides for HDFS.

If you give somebody writes permissions to the Solr policy file to define privileges for some Solr collection, this user can actually change privileges for any collection.

What problems are you solving with the product? What benefits have you realized?

Data security, delegate authorization and stuff