[
https://issues.apache.org/jira/browse/HADOOP-14274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15971236#comment-15971236
]
Hudson commented on HADOOP-14274:
---------------------------------
SUCCESS: Integrated in Jenkins build Hadoop-trunk-Commit #11591 (See
[https://builds.apache.org/job/Hadoop-trunk-Commit/11591/])
HADOOP-14274. Azure: Simplify Ranger-WASB policy model. Contributed by
(liuml07: rev 0cab57223e3f54be17a5f27cefdb6d1da1b073e5)
* (edit)
hadoop-tools/hadoop-azure/src/test/java/org/apache/hadoop/fs/azure/MockWasbAuthorizerImpl.java
* (edit)
hadoop-tools/hadoop-azure/src/test/java/org/apache/hadoop/fs/azure/metrics/TestAzureFileSystemInstrumentation.java
* (edit)
hadoop-tools/hadoop-azure/src/main/java/org/apache/hadoop/fs/azure/NativeAzureFileSystem.java
* (edit)
hadoop-tools/hadoop-azure/src/main/java/org/apache/hadoop/fs/azure/WasbAuthorizationOperations.java
* (edit)
hadoop-tools/hadoop-azure/src/test/java/org/apache/hadoop/fs/azure/TestNativeAzureFileSystemAuthorization.java
* (edit)
hadoop-tools/hadoop-azure/src/test/java/org/apache/hadoop/fs/azure/TestWasbRemoteCallHelper.java
* (edit)
hadoop-tools/hadoop-azure/src/main/java/org/apache/hadoop/fs/azure/RemoteWasbAuthorizerImpl.java
> Azure: Simplify Ranger-WASB policy model
> ----------------------------------------
>
> Key: HADOOP-14274
> URL: https://issues.apache.org/jira/browse/HADOOP-14274
> Project: Hadoop Common
> Issue Type: Improvement
> Components: fs/azure
> Reporter: Sivaguru Sankaridurg
> Assignee: Sivaguru Sankaridurg
> Fix For: 2.9.0, 3.0.0-alpha3
>
> Attachments: HADOOP-14274-001.patch, HADOOP-14274.002.patch,
> HADOOP-14274.003.patch, TestingForRegressionWithSecureModeSwitchedOff.txt,
> TestingWithSecureModeSwitchedOnSuccess.txt
>
>
> This improvement seeks to simplify the WASB-Ranger policy model -- both the
> policy specification and policy enforcement.
> More specifically, WASB-Ranger checks do not follow the same policy model and
> enforcement as Ranger-HDFS.
> Ranger-HDFS hands off to HDFS-ACLs when a policy-match is not found. The
> handoff requires the Ranger policies follow the same model as HDFS-ACLs. This
> is not true with Ranger+WASB.
> We seek to simplify the policy specification and enforcement by dropping the
> 'x' bit altogether.
> This JIRA tracks this improvement, alongwith a few more minor bugfixes that
> were found during Ranger-WASB testing.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
