-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/61678/
-----------------------------------------------------------

(Updated Aug. 16, 2017, 3:06 p.m.)


Review request for ranger and Madhan Neethiraj.


Bugs: RANGER-1181
    https://issues.apache.org/jira/browse/RANGER-1181


Repository: ranger


Description (updated)
-------

When Ranger cannot authorize the access request, and fallback to HDFS native 
authorizer is enabled, then native authorizer is invoked with incorrect 
parameter values for ancestorAccess, parentAccess, access or subAccess; instead 
of passing 'null' for these parameters when 'null' is provided in the original 
checkPermission() call, a value of FsAction:NONE is passed to native 
authorizer. This may cause the HDFS native authorizer to take a long time to 
authorize access, especially if the directory being authorized for access 
contains a large number of files/subdirectories.


Diffs (updated)
-----

  
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java
 f82fd57 


Diff: https://reviews.apache.org/r/61678/diff/2/

Changes: https://reviews.apache.org/r/61678/diff/1-2/


Testing
-------

Tested with local VM


Thanks,

Abhay Kulkarni

Reply via email to