fateh288 opened a new pull request, #281:
URL: https://github.com/apache/ranger/pull/281

   
   ## What changes were proposed in this pull request?
   
   RANGER-2222 https://issues.apache.org/jira/browse/RANGER-2222 added support 
for cluster as new resource. 
   RangerKafkaAuditHandler overrides the base implementation of 
RangerDefaultAuditHandler and this implementation overrides the default 
processResult(RangerAccessResult result) method wherein check is applied to 
decide if audit is needed or not ( If Cluster Resource Level Topic Creation is 
not Allowed we don't audit.Subsequent call from Kafka for Topic Creation at 
Topic resource Level will be audited)
   After RANGER-3231, the method processResults(Collection<RangerAccessResult> 
results) is called instead of processResult(RangerAccessResult result). 
   Since RangerKafkaAuditHandler does not have 
processResults(Collection<RangerAccessResult> results) i.e. kafka specific way 
to process results, it falls back on the default RangerDefaultAuditHandler and 
all authorizations are audited.
   
   Bug fixed / changes proposed: processResults(Collection<RangerAccessResult> 
results) implemented for RangerKafkaAuditHandler to add checks to determine if 
auditing is required or not.
   
   
   ## How was this patch tested?
   
   Manual testing in dev environment - no cluster deny logs observed after the 
fix
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@ranger.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to