[
https://issues.apache.org/jira/browse/IMPALA-15011?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18095622#comment-18095622
]
ASF subversion and git services commented on IMPALA-15011:
----------------------------------------------------------
Commit 00ca633a3c8472f6097abc7be0dc13e477325ac8 in impala's branch
refs/heads/master from Fang-Yu Rao
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=00ca633a3 ]
IMPALA-14956: Produce Ranger audit events for GRANT/REVOKE ROLE
Due to RANGER-5595, Impala could not produce Ranger audit events for
the GRANT/REVOKE ROLE statements. This patch works around this issue by
mimicking what RangerHiveAuthorizer#grantRole() does at
https://github.com/apache/ranger/blob/3fd46db/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java#L609-L612.
On a related note, adding the test cases for the GRANT/REVOKE privilege
statements is not in the scope of this JIRA. IMPALA-15011 was created to
keep track of this.
Testing:
- Added Java test cases to verify Ranger audit events could be produced
for the GRANT/REVOKE ROLE statements.
Change-Id: I7e0527af0532749817ea538c253262a5e2a65c61
Reviewed-on: http://gerrit.cloudera.org:8080/24315
Reviewed-by: Michael Smith <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
Reviewed-by: Jason Fehr <[email protected]>
> Add test cases to verify the Ranger audit events produced for GRANT/REVOKE
> privileges
> -------------------------------------------------------------------------------------
>
> Key: IMPALA-15011
> URL: https://issues.apache.org/jira/browse/IMPALA-15011
> Project: IMPALA
> Issue Type: Task
> Reporter: Fang-Yu Rao
> Priority: Major
>
> IMPALA-8400 implemented Ranger audit event handler. But no Java test cases
> were added for the GRANT/REVOKE privilege statements. It would be good if we
> add some test cases to verify the contents of the Ranger audit events for
> these statements.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
