Madhan Neethiraj created RANGER-561:
---------------------------------------
Summary: Ranger YARN plugin should fallback to YARN ACL, instead
of creating grants in Ranger
Key: RANGER-561
URL: https://issues.apache.org/jira/browse/RANGER-561
Project: Ranger
Issue Type: Bug
Components: plugins
Affects Versions: 0.5.0
Reporter: Madhan Neethiraj
Assignee: Madhan Neethiraj
Fix For: 0.5.0
Current implementation of Ranger YARN plugin creates Ranger policies for ACLs
specified in YARN configuration files. When the resource manager is restarted
with a different ACL configuration, the Ranger policies created for earlier
YARN ACLs would still be evaluated and might allow accesses that are not
currently configured in YARN ACL.
To fix this issue, the plugin should keep YARN ACLs in memory, instead of
creating Ranger policies for them, and evaluate them only when Ranger policies
are unable to determine the authorization.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
