[
https://issues.apache.org/jira/browse/RANGER-5423?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Vyom Mani Tiwari updated RANGER-5423:
-------------------------------------
Description:
In RangerPolicyEngineImpl.evaluatePolicies(Collection requests, ...), the read
lock is acquired once and held for the entire duration of processing the batch
try (RangerReadWriteLock.RangerLock readLock = policyEngine.getReadLock()) {
// Lock held here
for (RangerAccessRequest request : requests) {
// Process each request – can be thousands
...
}
// Lock released only after all requests are done
}
> Bulk policy evaluation holds read lock for entire batch, causing writer
> starvation and delayed policy updates
> -------------------------------------------------------------------------------------------------------------
>
> Key: RANGER-5423
> URL: https://issues.apache.org/jira/browse/RANGER-5423
> Project: Ranger
> Issue Type: Improvement
> Components: Ranger
> Affects Versions: 2.7.0
> Reporter: Vyom Mani Tiwari
> Assignee: Vyom Mani Tiwari
> Priority: Major
>
> In RangerPolicyEngineImpl.evaluatePolicies(Collection requests, ...), the
> read lock is acquired once and held for the entire duration of processing the
> batch
> try (RangerReadWriteLock.RangerLock readLock = policyEngine.getReadLock()) {
> // Lock held here
> for (RangerAccessRequest request : requests) {
> // Process each request – can be thousands
> ...
> }
> // Lock released only after all requests are done
> }
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
