Very cool proposal to integrate ranger with hawq. Here are two of my concerns, any clarification would be great. Thanks.
1. If users created in LDAP/Unix will be synced by UserSync processes periodically, is that means there is a chance that a newly created user might not be found in Ranger Admin Server just because it is not synced yet? 2. What's the expected behaviour when ranger becomes offline temporarily, and thus cannot provided sync/grant/check/audit functionalities in that interim? Will hawq stop responding to queries that are about to start, and wait for ranger to get back? Best regards, Ruilong Huo On Thu, Jul 28, 2016 at 4:10 PM, Hong Wu <[email protected]> wrote: > Thanks Wen, the right link should be: HAWQRangerSupportDesign.pdf > < > https://issues.apache.org/jira/secure/attachment/12820665/HAWQRangerSupportDesign.pdf > >. > Good work! > > Best > xunzhang > > 2016-07-28 16:08 GMT+08:00 Wen Lin <[email protected]>: > > > It's very strange, I attached a PDF file in the email, but it seems be > > blocked. > > The document can be downloaded from > > https://issues.apache.org/jira/browse/HAWQ-256 > > > > On Thu, Jul 28, 2016 at 4:04 PM, Ruilong Huo <[email protected]> wrote: > > > > > Any link to the doc? > > > > > > Best regards, > > > Ruilong Huo > > > > > > On Thu, Jul 28, 2016 at 4:04 PM, Wen Lin <[email protected]> wrote: > > > > > > > > > > > > > > > On Thu, Jul 28, 2016 at 4:03 PM, Wen Lin <[email protected]> wrote: > > > > > > > >> Hi, > > > >> > > > >> A design document for HAWQ Ranger Integration has been worked out by > > > >> Hubert, Lili and me. > > > >> Please share your suggestion or comments. > > > >> > > > >> Regards! > > > >> > > > > > > > > > > > > > >
