ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Abhay Kulkarni (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (RANGER-1695) Optimize Ranger code for authorization of HDFS 'getContentSummary' and 'delete' commands
Date Fri, 28 Jul 2017 02:04:00 GMT

    [ https://issues.apache.org/jira/browse/RANGER-1695?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16102131#comment-16102131
] 

Abhay Kulkarni edited comment on RANGER-1695 at 7/28/17 2:03 AM:
-----------------------------------------------------------------

Commit details:

master:

Project: http://git-wip-us.apache.org/repos/asf/ranger/repo
Commit: http://git-wip-us.apache.org/repos/asf/ranger/commit/96b0c486
Tree: http://git-wip-us.apache.org/repos/asf/ranger/tree/96b0c486
Diff: http://git-wip-us.apache.org/repos/asf/ranger/diff/96b0c486

Branch: refs/heads/master
Commit: 96b0c48602d777e7f1aacc6b7253fed874811b1a

ranger-0.7:

Project: http://git-wip-us.apache.org/repos/asf/ranger/repo
Commit: http://git-wip-us.apache.org/repos/asf/ranger/commit/5c8b45ce
Tree: http://git-wip-us.apache.org/repos/asf/ranger/tree/5c8b45ce
Diff: http://git-wip-us.apache.org/repos/asf/ranger/diff/5c8b45ce

Branch: refs/heads/ranger-0.7
Commit: 5c8b45cec1851442edecf02712b5bc9a86677ec9


was (Author: abhayk):
Commit details:

Project: http://git-wip-us.apache.org/repos/asf/ranger/repo
Commit: http://git-wip-us.apache.org/repos/asf/ranger/commit/96b0c486
Tree: http://git-wip-us.apache.org/repos/asf/ranger/tree/96b0c486
Diff: http://git-wip-us.apache.org/repos/asf/ranger/diff/96b0c486

Branch: refs/heads/master
Commit: 96b0c48602d777e7f1aacc6b7253fed874811b1a

> Optimize Ranger code for authorization of HDFS 'getContentSummary' and 'delete' commands
> ----------------------------------------------------------------------------------------
>
>                 Key: RANGER-1695
>                 URL: https://issues.apache.org/jira/browse/RANGER-1695
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 0.7.1
>            Reporter: Abhay Kulkarni
>            Assignee: Abhay Kulkarni
>             Fix For: master, 0.7.2
>
>
> HDFS commands such as getContentSummary and delete require Ranger to authorize access
to entire directory hierarchy rooted at the directory passed in as argument. Ranger could
optimize this code by pruning the directory tree whenever a sub-directory, and directory hierarchy
rooted in it, is authorized for requested access. This could potentially save many spurious
authorization API calls with Ranger policy engine.
> Also, it will be useful to gather and log performance metrics for the Ranger authorization
API call for every Ranger plugin.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message