-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/75045/
-----------------------------------------------------------
Review request for ranger, madhan, Madhan Neethiraj, Ramesh Mani, and
Velmurugan Periasamy.
Bugs: RANGER-4817
https://issues.apache.org/jira/browse/RANGER-4817
Repository: ranger
Description
-------
The focus of optimizations described below is to minimize the number of times
the Ranger policy-engine is called to authorize a NameNode RPC without
modifying the Namenode authorization interface or authorization call sequence.
This optimization is possible as the Namenode calls the authorizer more than
once to authorize some RPCs, as observed during the testing.
The following boolean valued config parameter -
"ranger.hdfs.authz.enable.optimization" control the optimization behaviour;
default value is false which disables the optimization.
Diffs
-----
agents-common/src/main/java/org/apache/ranger/plugin/service/RangerBasePlugin.java
6a614bf2d
agents-common/src/main/java/org/apache/ranger/plugin/util/RangerAccessRequestUtil.java
a56ecb268
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java
b11ee62a3
ranger-hdfs-plugin-shim/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java
22d0b450d
Diff: https://reviews.apache.org/r/75045/diff/1/
Testing
-------
Passes all unit tests.
Verified the optimization by setting the config parameter
"ranger.hdfs.authz.enable.optimization" to true.
Thanks,
Abhay Kulkarni
