v-9980 commented on PR #79: URL: https://github.com/apache/ranger/pull/79#issuecomment-1659515971
This is useful for me when upgrading from version 2.1.0 to 2.3.0(RANGER-2789 has been reverted). In the Ranger plugin, only policies and roles are synchronized, and there is no mapping for users and groups. In order to enable group authorization in the policies, and to ensure that only user-specific policies are passed in the plugin, we maintain a cache of user-to-group mapping in the plugin. The synchronization frequency of this cache is consistent with the policy synchronization time. We use the service/xusers/users API to fetch the user-to-group relationship. When there are fewer users, Ranger-admin runs smoothly. However, when there are a large number of users(2k), Ranger-admin experiences a significant number of blocked threads. thanks, RickyMa   -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
