Fang-Yu Rao has posted comments on this change. ( 
http://gerrit.cloudera.org:8080/18850 )

Change subject: IMPALA-11494: Don't always produce Ranger audit log for 
authorized query
......................................................................


Patch Set 4:

(1 comment)

> Patch Set 3:
>
> (1 comment)
>
> lgtm, one comment about code cleanness

Hi all, I have slightly revised the patch set 3 according to Csaba's 
suggestion. Please let me know if there is any other comment

Thank you very much for the help!

http://gerrit.cloudera.org:8080/#/c/18850/3/fe/src/main/java/org/apache/impala/authorization/ranger/RangerAuthorizationChecker.java
File 
fe/src/main/java/org/apache/impala/authorization/ranger/RangerAuthorizationChecker.java:

http://gerrit.cloudera.org:8080/#/c/18850/3/fe/src/main/java/org/apache/impala/authorization/ranger/RangerAuthorizationChecker.java@203
PS3, Line 203:       // to determine whether the correct audit events are 
collected.
             :       auditHandler.getAuthzEvents().clear();
             :     } else {
             :       // We send audit log entries to the Ranger server only if 
authorization failed or
             :       // analysis succeeded.
> The two conditions are the opposites of each other - can you convert this t
Thanks Csaba!

I will change the above to an if-else block in the next patch.



--
To view, visit http://gerrit.cloudera.org:8080/18850
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I701652e457d3118f43249e83be933713b17ce48f
Gerrit-Change-Number: 18850
Gerrit-PatchSet: 4
Gerrit-Owner: Fang-Yu Rao <[email protected]>
Gerrit-Reviewer: Aman Sinha <[email protected]>
Gerrit-Reviewer: Csaba Ringhofer <[email protected]>
Gerrit-Reviewer: Fang-Yu Rao <[email protected]>
Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
Gerrit-Reviewer: Quanlong Huang <[email protected]>
Gerrit-Comment-Date: Wed, 17 Aug 2022 16:35:15 +0000
Gerrit-HasComments: Yes

Reply via email to