ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Abhay Kulkarni (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (RANGER-1695) Optimize Ranger code for authorization of HDFS 'getContentSummary' and 'delete' commands
Date Fri, 28 Jul 2017 02:03:00 GMT

     [ https://issues.apache.org/jira/browse/RANGER-1695?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Abhay Kulkarni updated RANGER-1695:
-----------------------------------
    Fix Version/s: 0.7.2

> Optimize Ranger code for authorization of HDFS 'getContentSummary' and 'delete' commands
> ----------------------------------------------------------------------------------------
>
>                 Key: RANGER-1695
>                 URL: https://issues.apache.org/jira/browse/RANGER-1695
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 0.7.1
>            Reporter: Abhay Kulkarni
>            Assignee: Abhay Kulkarni
>             Fix For: master, 0.7.2
>
>
> HDFS commands such as getContentSummary and delete require Ranger to authorize access
to entire directory hierarchy rooted at the directory passed in as argument. Ranger could
optimize this code by pruning the directory tree whenever a sub-directory, and directory hierarchy
rooted in it, is authorized for requested access. This could potentially save many spurious
authorization API calls with Ranger policy engine.
> Also, it will be useful to gather and log performance metrics for the Ranger authorization
API call for every Ranger plugin.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message