ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mehul Parikh (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (RANGER-1553) Audit log record for 'show databases' hive command contains all tags
Date Thu, 27 Sep 2018 09:45:00 GMT

    [ https://issues.apache.org/jira/browse/RANGER-1553?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16630073#comment-16630073
] 

Mehul Parikh commented on RANGER-1553:
--------------------------------------

Committed to [ranger-0.7|https://github.com/apache/ranger/commit/49d2962da60c896d1ceeadff39749e4efd2cd8e0]

> Audit log record for 'show databases' hive command contains all tags
> --------------------------------------------------------------------
>
>                 Key: RANGER-1553
>                 URL: https://issues.apache.org/jira/browse/RANGER-1553
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 1.0.0
>            Reporter: Abhay Kulkarni
>            Assignee: Abhay Kulkarni
>            Priority: Major
>             Fix For: 1.0.0
>
>
> If hive service is associated with a tag service, then when a ‘show databases’ command
is authorized by Ranger, potentially, all tags associated with all hive entities are evaluated
to determine the authorization of the command. Consequently, the audit log record generated
for it will show, in the tags field, every tag provisioned for any hive entity in Ranger.
With large number of tags associated with hive entities, the audit log is very cluttered and
does not convey meaningful information. For the sake of usability, it will be better not to
log all tags in the corresponding audit log record for this specific command.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message