How to use Sentry to create roles and authorizations in Hue

Refer to the official document: http://gethue.com/apache-sentry-made-easy-with-the-new-hue-security-app/#howto

Join the group of your hue administrator account in sentry's admin group

Open the hue configuration and enter

[libsentry]

# ip of the node where the sentry service resides

Hostname=sentry

# ipc port of sentry service

Port=8038

The path to the sentry-site.xml on the node of # hue (if there is no copy to come)

Sentry_conf_dir=/etc/sentry/conf

Configuration content (for reference only) sentry.service.security.mode none sentry.service.admin.group hive,impala,hue,solr,kafka,hbase,spark2,bigdataadmin sentry.service.allow.connect impala,hive,solr sentry.store.jdbc.url jdbc:derby:;databaseName=sentry_store_db;create=true sentry.store.jdbc.driver org.apache.derby.jdbc.EmbeddedDriver

The sentry.service.admin.group item must be consistent with the sentry server, and be sure to fill in your hue administrator account, otherwise the authorization button will be missing on the authorized page, because hue does not know that you are an admin user of sentry and thinks you do not have permission.

Finally, in the user group of hue, adding the corresponding user group of administrator is the same as the user group of the system in ldap. For example, my user bigdataadmin, the group name is also bigdataadmin, so that it can correspond to the configuration item sentry.service.admin.group in sentry.

Once all the steps have been completed, you can authorize it in the hue interface.

Go to the sentry management page:

Add roles and authorizations