----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/61678/#review183056 -----------------------------------------------------------
Ship it! Ship It! - Madhan Neethiraj On Aug. 16, 2017, 3:06 p.m., Abhay Kulkarni wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/61678/ > ----------------------------------------------------------- > > (Updated Aug. 16, 2017, 3:06 p.m.) > > > Review request for ranger and Madhan Neethiraj. > > > Bugs: RANGER-1181 > https://issues.apache.org/jira/browse/RANGER-1181 > > > Repository: ranger > > > Description > ------- > > When Ranger cannot authorize the access request, and fallback to HDFS native > authorizer is enabled, then native authorizer is invoked with incorrect > parameter values for ancestorAccess, parentAccess, access or subAccess; > instead of passing 'null' for these parameters when 'null' is provided in the > original checkPermission() call, a value of FsAction:NONE is passed to native > authorizer. This may cause the HDFS native authorizer to take a long time to > authorize access, especially if the directory being authorized for access > contains a large number of files/subdirectories. > > > Diffs > ----- > > > hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java > f82fd57 > > > Diff: https://reviews.apache.org/r/61678/diff/2/ > > > Testing > ------- > > Tested with local VM > > > Thanks, > > Abhay Kulkarni > >
