[
https://issues.apache.org/jira/browse/RANGER-4300?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17750939#comment-17750939
]
Dineshkumar Yadav commented on RANGER-4300:
-------------------------------------------
Reverting this patch as we want to maintain existing behaviour intact as per
hbase-native behaviour.
revert commit :
https://github.com/apache/ranger/commit/f1f5c02e29e50fb175c1dcb7756638e58f65c207
> HBase shell revoke command failed with 'HTTP 400 Error:
> processSecureRevokeRequest processing failed'
> -----------------------------------------------------------------------------------------------------
>
> Key: RANGER-4300
> URL: https://issues.apache.org/jira/browse/RANGER-4300
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Rakesh Gupta
> Assignee: Rakesh Gupta
> Priority: Major
> Fix For: 3.0.0
>
> Attachments: 0002-RANGER-4300.patch
>
>
> HBase shell revoke command failed with 'HTTP 400 Error:
> processSecureRevokeRequest processing failed'
> {code:java}
> hbase:001:0> revoke 'hrt_11'
> ERROR: org.apache.hadoop.hbase.coprocessor.CoprocessorException: HTTP 400
> Error: processSecureRevokeRequest processing failed
> at
> org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.preRevoke(RangerAuthorizationCoprocessor.java:1309)
> at
> org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.preRevoke(RangerAuthorizationCoprocessor.java:1128)
> at
> org.apache.hadoop.hbase.master.MasterCoprocessorHost$162.call(MasterCoprocessorHost.java:1857)
> at
> org.apache.hadoop.hbase.master.MasterCoprocessorHost$162.call(MasterCoprocessorHost.java:1854)
> at
> org.apache.hadoop.hbase.coprocessor.CoprocessorHost$ObserverOperationWithoutResult.callObserver(CoprocessorHost.java:558)
> at
> org.apache.hadoop.hbase.coprocessor.CoprocessorHost.execOperation(CoprocessorHost.java:631)
> at
> org.apache.hadoop.hbase.master.MasterCoprocessorHost.preRevoke(MasterCoprocessorHost.java:1854)
> at
> org.apache.hadoop.hbase.master.MasterRpcServices.revoke(MasterRpcServices.java:2740)
> at
> org.apache.hadoop.hbase.shaded.protobuf.generated.MasterProtos$MasterService$2.callBlockingMethod(MasterProtos.java)
> at org.apache.hadoop.hbase.ipc.RpcServer.call(RpcServer.java:387)
> at org.apache.hadoop.hbase.ipc.CallRunner.run(CallRunner.java:139)
> at
> org.apache.hadoop.hbase.ipc.RpcExecutor$Handler.run(RpcExecutor.java:369)
> at
> org.apache.hadoop.hbase.ipc.RpcExecutor$Handler.run(RpcExecutor.java:349)
> For usage try 'help "revoke"'
> Took 1.3487 seconds
> hbase:002:0> grant 'hrt_2', 'R'
> Took 0.7979 seconds
> hbase:003:0> grant 'hrt_11', 'R'
> Took 0.9092 seconds
> {code}
> Steps to reproduce:
> Case 1 :
> Grant access request from shell command
> Revoke access twice
> Case 2 :
> Grant access to user1 from shell command
> revoke access from user2 from shell command
> Case 3 :
> Ranger policy created at Group/Role access level
> Revoke access request for user belongs to Group/Roles from shell command
> Case 4 :
> Grant access to user with Table from shell command
> revoke access from user without Table from shell command
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
