[ 
https://issues.apache.org/jira/browse/RANGER-2128?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16538329#comment-16538329
 ] 

Kent Yao commented on RANGER-2128:
----------------------------------

Hi [~bosco] You can try Spark 2.3.1, because this change 
https://github.com/apache/spark/blob/branch-2.3/sql/hive/src/main/scala/org/apache/spark/sql/hive/client/HiveClientImpl.scala#L129
 ensures the SessionState that contains the thrift user body will be reused. 

But there is still a problem that the hive metastore client which contains the 
ugi for authorization is shared among SparkSession s inside Spark Thrift Sever. 
We can not reuse it for different users. We may need to manage a <user, 
SessionState> map to do privileges checking,  which may left "show tables" / 
"show databases" ... statements unchecked and cause plenty of connections to 
the metastore server.

> Implement SparkSQL plugin
> -------------------------
>
>                 Key: RANGER-2128
>                 URL: https://issues.apache.org/jira/browse/RANGER-2128
>             Project: Ranger
>          Issue Type: New Feature
>          Components: plugins, Ranger
>    Affects Versions: 1.1.0
>            Reporter: t oo
>            Assignee: Kent Yao
>            Priority: Major
>             Fix For: 2.0.0
>
>
> Implement SparkSQL plugin



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to