Adar Dembo has posted comments on this change. ( 
http://gerrit.cloudera.org:8080/15074 )

Change subject: [java] KUDU-2972: add Kudu Ranger plugin
......................................................................


Patch Set 9:

(1 comment)

http://gerrit.cloudera.org:8080/#/c/15074/4/java/kudu-ranger/src/main/java/org/apache/kudu/ranger/authorization/RangerKuduAuthorizer.java
File 
java/kudu-ranger/src/main/java/org/apache/kudu/ranger/authorization/RangerKuduAuthorizer.java:

http://gerrit.cloudera.org:8080/#/c/15074/4/java/kudu-ranger/src/main/java/org/apache/kudu/ranger/authorization/RangerKuduAuthorizer.java@126
PS4, Line 126:     resource.setValue(RANGER_DB_RESOURCE_NAME, db);
             :     resource.setValue(RANGER_TABLE_RESOURCE_NAME, table);
             :     resource.setValue(RANGER_COLUMN_RESOUR
> I think it is up to the setting of the cluster, it can be any of the 
> available mechanisms.

How does this get configured, and by whom?

> And this is not a requirement for Kudu master, it is only used in Ranger side.

I'm confused; this is code within kudu-ranger, which is the Java subprocess 
tethered to a Kudu master, right? So isn't the user->group mapping taking place 
on a Kudu master node?



--
To view, visit http://gerrit.cloudera.org:8080/15074
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I0c995ac1a48ebf57667231cd3a82d3794f6ddf8d
Gerrit-Change-Number: 15074
Gerrit-PatchSet: 9
Gerrit-Owner: Hao Hao <[email protected]>
Gerrit-Reviewer: Adar Dembo <[email protected]>
Gerrit-Reviewer: Andrew Wong <[email protected]>
Gerrit-Reviewer: Attila Bukor <[email protected]>
Gerrit-Reviewer: Hao Hao <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Comment-Date: Thu, 20 Feb 2020 00:46:07 +0000
Gerrit-HasComments: Yes

Reply via email to