[ 
https://issues.apache.org/jira/browse/RANGER-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15385260#comment-15385260
 ] 

Dongying Jiao commented on RANGER-1108:
---------------------------------------

Thanks for your comments.
Do you mean we'd better only use ranger to manager permission and avoid giving 
permission through hdfs native?
Yes, it should be the normal case.
But it is still a little strange if the behavior is not the same with hdfs 
native authentication even for special cases.
And I also want to know what should be the reasonable result if ranger give "x" 
permission and hdfs give "w" permission or ranger give "w" permission and hdfs 
give "x" permission. 

> Ranger hdfs plugin authentication issue when user mkdir 
> --------------------------------------------------------
>
>                 Key: RANGER-1108
>                 URL: https://issues.apache.org/jira/browse/RANGER-1108
>             Project: Ranger
>          Issue Type: Bug
>          Components: plugins
>    Affects Versions: 0.5.2
>            Reporter: Dongying Jiao
>
> 1. Create a user named "ranger_test", create hdfs dir /user/ranger_test.
> 2. Ranger give this user only write right to this dir, native hdfs give this 
> user only execute right to this dir, user is allowed to mkdir under  
> /user/ranger_test.
> "hadoop fs -mkdir /user/ranger_test/temp1" success.
> 3. On the contrary, Ranger give this user only execute right to this dir, 
> native hdfs give this user only write right to this dir, user is not allowed 
> to mkdir under  /user/ranger_test.
> "hadoop fs -mkdir /user/ranger_test/temp1" failed.
> I think the behavior should be the same for above two scenario.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to