Abhay Kulkarni created RANGER-4007:
--------------------------------------
Summary: HDFS Authorizer changes to take advantage of support for
multiple access-types in the Ranger Access Request
Key: RANGER-4007
URL: https://issues.apache.org/jira/browse/RANGER-4007
Project: Ranger
Issue Type: Improvement
Components: Ranger
Reporter: Abhay Kulkarni
Assignee: Abhay Kulkarni
Ranger authorizer plugin for HDFS, when asked to authorize certain accesses,
requires to check if the user is authorized to do more than one permission for
the requested resource. Currently, this is achieved by the plugin making
separate call into Ranger policy engine to check authorization for each such
permission. This works, but is inefficient.
A recent improvement in Ranger policy engine (RANGER-3999) adds support for
specifying multiple permissions that need to be authorized for a resource in
one Policy engine call. This Jira updates the Ranger plugin for HDFS to use
this feature, thereby improving performance of access authorization for certain
access requests.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
