-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59247/
-----------------------------------------------------------

Review request for ranger and Madhan Neethiraj.


Bugs: RANGER-1578
    https://issues.apache.org/jira/browse/RANGER-1578


Repository: ranger


Description
-------

If the plugin fails to obtain the service-def from Ranger Admin (or from 
local-cache), plugin is initialized with a default version of service-def - 
against which the plugin was developed.


Diffs
-----

  
agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineImpl.java
 508ef93 
  
agents-common/src/main/java/org/apache/ranger/plugin/service/RangerBasePlugin.java
 5b13a2f 
  
agents-common/src/main/java/org/apache/ranger/plugin/store/EmbeddedServiceDefsUtil.java
 295272d 
  
agents-common/src/main/java/org/apache/ranger/plugin/util/PolicyRefresher.java 
c5a4244 
  
hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
 8f6311e 


Diff: https://reviews.apache.org/r/59247/diff/1/


Testing
-------

In an Ambari deployed cluster: enabled Ranger for hive, and ensured that the 
hive component cannot download policies from Ranger-admin. Tested ranger-plugin 
by executing hive commands through beeline command-line tool and verified that 
a. access to hive resource was denied, and b. audit log records were created, 
and viewable through ranger-admin GUI.


Thanks,

Abhay Kulkarni

Reply via email to