----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/75255/#review227024 -----------------------------------------------------------
Ship it! Ship It! - Abhay Kulkarni On Nov. 5, 2024, 7:30 a.m., Mahesh Bandal wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/75255/ > ----------------------------------------------------------- > > (Updated Nov. 5, 2024, 7:30 a.m.) > > > Review request for ranger, Ankita Sinha, Gautam Borad, Abhay Kulkarni, Madhan > Neethiraj, Mehul Parikh, Pradeep Agrawal, Ramesh Mani, Sailaja Polavarapu, > and Velmurugan Periasamy. > > > Bugs: RANGER-4980 > https://issues.apache.org/jira/browse/RANGER-4980 > > > Repository: ranger > > > Description > ------- > > when chained plugin is enabled and all access is provided to a directory > which has multiple files and directories under it and if a user tries to > delete a that directory then access is denied. > Steps to repro: > create a policy which will grant all access to systest user on a directory. > > Try performing write access. It should allow. > * hdfs dfs -mkdir /user/data/part_default1/state=98/dir1 > > Now, remove default ACL's on hdfs path > * hdfs dfs -chmod -R +000 /user/data/part_default1 > > Now, try delete operation. Access will be denied. > * hdfs dfs -rm -r -skipTrash /user/data/part_default1/state=98 > > > Diffs > ----- > > > agents-common/src/main/java/org/apache/ranger/plugin/service/RangerBasePlugin.java > 8db08c598 > > agents-common/src/main/java/org/apache/ranger/plugin/util/RangerAccessRequestUtil.java > 6546e287c > > hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java > 9ce25695c > > > Diff: https://reviews.apache.org/r/75255/diff/1/ > > > Testing > ------- > > - manually tested the scenario. > - ranger hdfs policy related sainty testing is done > > > Thanks, > > Mahesh Bandal > >
