Ramesh Mani created RANGER-3507:
-----------------------------------
Summary: Handle trailing slash in the ranger Hive URL policy
authorization
Key: RANGER-3507
URL: https://issues.apache.org/jira/browse/RANGER-3507
Project: Ranger
Issue Type: Bug
Components: Ranger
Affects Versions: 2.0.0, 3.0.0
Reporter: Ramesh Mani
Fix For: 3.0.0
Currently when there is a trailing slash in the ranger URL policy in Hive, it
doesn't authorizer the URL request. The trailing slash has to be remove to have
the authorization done correctly.
e.g.
1) URL policy is maintained for "hdfs://node1.site/test/data/" with or without
recursive on.
2) Authorization request from Hive always comes without the trailing slash (
hdfs://node1.site/test/data) and this result in authorization failure.
Url policy with or without trailing slash has to behave the same way. As per
POSIX perspective "hdfs://node1.site/test/data/" and
"hdfs://node1.site/test/data" are same and the policy has to authorize the
request correctly.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
