[
https://issues.apache.org/jira/browse/RANGER-1695?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16102131#comment-16102131
]
Abhay Kulkarni edited comment on RANGER-1695 at 7/28/17 2:03 AM:
-----------------------------------------------------------------
Commit details:
master:
Project: http://git-wip-us.apache.org/repos/asf/ranger/repo
Commit: http://git-wip-us.apache.org/repos/asf/ranger/commit/96b0c486
Tree: http://git-wip-us.apache.org/repos/asf/ranger/tree/96b0c486
Diff: http://git-wip-us.apache.org/repos/asf/ranger/diff/96b0c486
Branch: refs/heads/master
Commit: 96b0c48602d777e7f1aacc6b7253fed874811b1a
ranger-0.7:
Project: http://git-wip-us.apache.org/repos/asf/ranger/repo
Commit: http://git-wip-us.apache.org/repos/asf/ranger/commit/5c8b45ce
Tree: http://git-wip-us.apache.org/repos/asf/ranger/tree/5c8b45ce
Diff: http://git-wip-us.apache.org/repos/asf/ranger/diff/5c8b45ce
Branch: refs/heads/ranger-0.7
Commit: 5c8b45cec1851442edecf02712b5bc9a86677ec9
was (Author: abhayk):
Commit details:
Project: http://git-wip-us.apache.org/repos/asf/ranger/repo
Commit: http://git-wip-us.apache.org/repos/asf/ranger/commit/96b0c486
Tree: http://git-wip-us.apache.org/repos/asf/ranger/tree/96b0c486
Diff: http://git-wip-us.apache.org/repos/asf/ranger/diff/96b0c486
Branch: refs/heads/master
Commit: 96b0c48602d777e7f1aacc6b7253fed874811b1a
> Optimize Ranger code for authorization of HDFS 'getContentSummary' and
> 'delete' commands
> ----------------------------------------------------------------------------------------
>
> Key: RANGER-1695
> URL: https://issues.apache.org/jira/browse/RANGER-1695
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Affects Versions: 0.7.1
> Reporter: Abhay Kulkarni
> Assignee: Abhay Kulkarni
> Fix For: master, 0.7.2
>
>
> HDFS commands such as getContentSummary and delete require Ranger to
> authorize access to entire directory hierarchy rooted at the directory passed
> in as argument. Ranger could optimize this code by pruning the directory tree
> whenever a sub-directory, and directory hierarchy rooted in it, is authorized
> for requested access. This could potentially save many spurious authorization
> API calls with Ranger policy engine.
> Also, it will be useful to gather and log performance metrics for the Ranger
> authorization API call for every Ranger plugin.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
