fateh288 opened a new pull request, #417:
URL: https://github.com/apache/ranger/pull/417

   ## What changes were proposed in this pull request?
   
   A property/flag can be set via hbase service configs wherein during column 
level authorization, it can be used to determine if an authorization at column 
family can be used to determine if column authorization can be shortcircuited 
as an optimization (there will be audit behavior changes in this case). This is 
useful for improving performance especially for multiget and multiput workloads 
wherein thousands of columns can come in the authorization request and just 
checking column family level access can improve performance drastically
   
   
   ## How was this patch tested?
   
   Existing test cases work
   
   New test cases have been added for hbase. The test cases cover the scan 
operation bug addressed in RANGER-4977 and also covers new unit test cases for 
testing correctness of column authorization shortcircuiting. These minicluster 
cased test cases do not work on master branch (because they are ignored using 
junit ignore annotation -- currently being tracked at 
https://issues.apache.org/jira/browse/RANGER-4686 and was caused due to hadoop 
version upgrades) 
   I have verified that the new added test cases work on my private fork.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@ranger.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to