-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/66251/
-----------------------------------------------------------

(Updated March 23, 2018, 6:09 p.m.)


Review request for ranger and Madhan Neethiraj.


Summary (updated)
-----------------

Avoid creation of spurious audit record in HDFS 2.8.0 and later versions


Bugs: RANGER-2037
    https://issues.apache.org/jira/browse/RANGER-2037


Repository: ranger


Description
-------

HDFS 2.8.0 calls authorizer twice for each access request; first for 
traverse-only check and second for specific access permission check. Currently, 
first check produces an audit record which is unnecessary and confusing as it 
seems to suggest that Ranger authorizer denied the request.


Diffs (updated)
-----

  
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java
 59cf6b12f 


Diff: https://reviews.apache.org/r/66251/diff/2/

Changes: https://reviews.apache.org/r/66251/diff/1-2/


Testing (updated)
-------

Tested in a local VM.


Thanks,

Abhay Kulkarni

Reply via email to