ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Abhay Kulkarni (JIRA)" <j...@apache.org>
Subject [jira] [Created] (RANGER-1695) Optimize Ranger code for authorization of HDFS commands getContentSummary and delete
Date Mon, 17 Jul 2017 23:25:00 GMT
Abhay Kulkarni created RANGER-1695:
--------------------------------------

             Summary: Optimize Ranger code for authorization of HDFS commands getContentSummary
and delete
                 Key: RANGER-1695
                 URL: https://issues.apache.org/jira/browse/RANGER-1695
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
    Affects Versions: 0.7.1
            Reporter: Abhay Kulkarni
            Assignee: Abhay Kulkarni
             Fix For: master


HDFS commands such as getContentSummary and delete require Ranger to authorize access to entire
directory hierarchy rooted at the directory passed in as argument. Ranger could optimize this
code by pruning the directory tree whenever a sub-directory, and directory hierarchy rooted
in it, is authorized for requested access. This could potentially save many spurious authorization
API calls with Ranger policy engine.
Also, it will be useful to gather and log performance metrics for the Ranger authorization
API call for every Ranger plugin.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message