----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/61678/ -----------------------------------------------------------
(Updated Aug. 16, 2017, 3:06 p.m.) Review request for ranger and Madhan Neethiraj. Bugs: RANGER-1181 https://issues.apache.org/jira/browse/RANGER-1181 Repository: ranger Description (updated) ------- When Ranger cannot authorize the access request, and fallback to HDFS native authorizer is enabled, then native authorizer is invoked with incorrect parameter values for ancestorAccess, parentAccess, access or subAccess; instead of passing 'null' for these parameters when 'null' is provided in the original checkPermission() call, a value of FsAction:NONE is passed to native authorizer. This may cause the HDFS native authorizer to take a long time to authorize access, especially if the directory being authorized for access contains a large number of files/subdirectories. Diffs (updated) ----- hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java f82fd57 Diff: https://reviews.apache.org/r/61678/diff/2/ Changes: https://reviews.apache.org/r/61678/diff/1-2/ Testing ------- Tested with local VM Thanks, Abhay Kulkarni