[ranger] branch ranger-2.2 updated: RANGER-3288:Ranger Audit Filters doesn't filter hdfs read operation when filter is set to not audit read

[rmani]

This is an automated email from the ASF dual-hosted git repository.

rmani pushed a commit to branch ranger-2.2
in repository https://gitbox.apache.org/repos/asf/ranger.git


The following commit(s) were added to refs/heads/ranger-2.2 by this push:
     new 7d2afd7  RANGER-3288:Ranger Audit Filters doesn't filter hdfs read 
operation when filter is set to not audit read
7d2afd7 is described below

commit 7d2afd7d17d768601e9f9e860ed10ab49e6c9c9a
Author: Ramesh Mani <rm...@cloudera.com>
AuthorDate: Wed May 19 13:34:35 2021 -0700

    RANGER-3288:Ranger Audit Filters doesn't filter hdfs read operation when 
filter is set to not audit read
---
 .../org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java  | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git 
a/hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java
 
b/hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java
index 4c1ef7c..98a6431 100644
--- 
a/hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java
+++ 
b/hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java
@@ -998,9 +998,7 @@ class RangerHdfsAuditHandler extends 
RangerDefaultAuditHandler {
                }
 
                if (result != null) {
-                       if(! isAuditEnabled && result.getIsAudited()) {
-                               isAuditEnabled = true;
-                       }
+                       isAuditEnabled = result.getIsAudited();
 
                        if (auditEvent == null) {
                                auditEvent = super.getAuthzEvents(result);