Abhishek Chennaka has uploaded this change for review. ( http://gerrit.cloudera.org:8080/22814
Change subject: KUDU-3661 Ranger policy not honored in Kudu ...................................................................... KUDU-3661 Ranger policy not honored in Kudu This fixes a long-standing bug in the Ranger authorization provider where we return prematurely from RangerAuthzProvider::FillTablePrivilegePB() when the SELECT action is encountered while iterating through unordered_set<ActionPB, ActionHas> container, potentially resulting in missing privileges depending on the position of the SELECT action in the set. While this behavior depends on the libc++/libstdc++ implementation, we have observed reports of this issue on RHEL/CentOS 8 machines. Thanks to Alexey Serbin for valuable inputs and contributions on this fix. Test case source: https://gerrit.cloudera.org/#/c/22809/ Change-Id: I635132154d622eb41e993a0a1a818b21b5af6bb7 Reviewed-on: http://gerrit.cloudera.org:8080/22806 Reviewed-by: Alexey Serbin <[email protected]> Tested-by: Abhishek Chennaka <[email protected]> (cherry picked from commit 4e5cd21da441444cf960e8fa53a71042b7be17c9) --- M src/kudu/integration-tests/ts_authz-itest.cc M src/kudu/master/ranger_authz_provider.cc 2 files changed, 47 insertions(+), 6 deletions(-) git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/14/22814/1 -- To view, visit http://gerrit.cloudera.org:8080/22814 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: branch-1.18.x Gerrit-MessageType: newchange Gerrit-Change-Id: I635132154d622eb41e993a0a1a818b21b5af6bb7 Gerrit-Change-Number: 22814 Gerrit-PatchSet: 1 Gerrit-Owner: Abhishek Chennaka <[email protected]>
