[
https://issues.apache.org/jira/browse/RANGER-693?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14956255#comment-14956255
]
Don Bosco Durai commented on RANGER-693:
----------------------------------------
I feel it will get more complicated. Because within the /apps/hive/warehouse
there could be multiple folders for databases and sub-folders for tables and
partitions. And each with different permissions. The same would apply for other
user folders.
Regardless, we have to make it simple for the users to configure such policies.
It could be internally implemented using one of our policies.
> HDFS folder permission exclusively managed my Ranger
> ----------------------------------------------------
>
> Key: RANGER-693
> URL: https://issues.apache.org/jira/browse/RANGER-693
> Project: Ranger
> Issue Type: Improvement
> Affects Versions: 0.5.1
> Reporter: Don Bosco Durai
> Fix For: 0.6.0
>
>
> In HDFS plugin, if there are no policies for the file/folder, then Ranger
> falls backs to HDFS file/folder permission.
> While this is very convenient, but in some cases it is desirable that only
> Ranger manages the policies. Good examples are folders like
> /apps/hive/warehouse or some user folders where it is better that Ranger
> manages the entire permission.
> One suggestion is to mark folders which will be managed by Ranger. For these
> folders, ignore all permissions and ownership set at the HDFS file/folder
> level.
> This will be a very useful feature for Ranger.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
