ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Abhay Kulkarni <akulka...@hortonworks.com>
Subject Review Request 54320: hbase policy created as a result of hbase grant request does not allow dropping the namespace for the grantee user
Date Fri, 02 Dec 2016 19:57:03 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/54320/
-----------------------------------------------------------

Review request for ranger, Madhan Neethiraj and Ramesh Mani.


Summary (updated)
-----------------

hbase policy created as a result of hbase grant request does not allow dropping the namespace
for the grantee user


Bugs: RANGER-1239
    https://issues.apache.org/jira/browse/RANGER-1239


Repository: ranger


Description (updated)
-------

Created 'test' namespace and granted all access to it for user 'hrt_1'. Attempt to delete
'test' namespace by 'hrt_1' user failed authorization. It should have succeeded.


Diffs (updated)
-----

  agents-common/src/test/java/org/apache/ranger/plugin/policyengine/TestPolicyEngine.java
9176808 
  agents-common/src/test/resources/policyengine/test_policyengine_hbase_namespace.json PRE-CREATION

  hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/AuthorizationSession.java
e49405d 

Diff: https://reviews.apache.org/r/54320/diff/


Testing (updated)
-------

Tested with local VM for the described behaviour. Ensured that 'test' namespace is deleted
as expected. Added unit tests.


Thanks,

Abhay Kulkarni


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message