Repository: ranger Updated Branches: refs/heads/master a2e896da0 -> c3fbdae9f
RANGER-1841: Audit log record for 'use dbName' hive command contains large number of tags Project: http://git-wip-us.apache.org/repos/asf/ranger/repo Commit: http://git-wip-us.apache.org/repos/asf/ranger/commit/c3fbdae9 Tree: http://git-wip-us.apache.org/repos/asf/ranger/tree/c3fbdae9 Diff: http://git-wip-us.apache.org/repos/asf/ranger/diff/c3fbdae9 Branch: refs/heads/master Commit: c3fbdae9faf4e53816e9cc7b965f8a5aa59cf1e6 Parents: a2e896d Author: Abhay Kulkarni <[email protected]> Authored: Mon Oct 16 16:33:52 2017 -0700 Committer: Abhay Kulkarni <[email protected]> Committed: Mon Oct 16 16:37:20 2017 -0700 ---------------------------------------------------------------------- .../authorization/hive/authorizer/RangerHiveAuditHandler.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ranger/blob/c3fbdae9/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuditHandler.java ---------------------------------------------------------------------- diff --git a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuditHandler.java b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuditHandler.java index 24a71fa..89bc0d8 100644 --- a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuditHandler.java +++ b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuditHandler.java @@ -58,8 +58,8 @@ public class RangerHiveAuditHandler extends RangerDefaultAuditHandler { RangerHiveAccessRequest hiveAccessRequest = (RangerHiveAccessRequest) request; RangerHiveResource hiveResource = (RangerHiveResource) resource; - if (hiveAccessRequest.getHiveAccessType() == HiveAccessType.USE && hiveResource.getObjectType() == HiveObjectType.DATABASE && StringUtils.isBlank(hiveResource.getDatabase())) { - // this should happen only for SHOWDATABASES + if (hiveAccessRequest.getHiveAccessType() == HiveAccessType.USE && hiveResource.getObjectType() == HiveObjectType.DATABASE) { + // this should happen only for SHOWDATABASES and USE <db-name> commands auditEvent.setTags(null); } }
