Abhishek Chennaka has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/22814 )
Change subject: KUDU-3661 Ranger policy not honored in Kudu ...................................................................... KUDU-3661 Ranger policy not honored in Kudu This fixes a long-standing bug in the Ranger authorization provider where we return prematurely from RangerAuthzProvider::FillTablePrivilegePB() when the SELECT action is encountered while iterating through unordered_set<ActionPB, ActionHas> container, potentially resulting in missing privileges depending on the position of the SELECT action in the set. While this behavior depends on the libc++/libstdc++ implementation, we have observed reports of this issue on RHEL/CentOS 8 machines. Thanks to Alexey Serbin for valuable inputs and contributions on this fix. Test case source: https://gerrit.cloudera.org/#/c/22809/ Change-Id: I635132154d622eb41e993a0a1a818b21b5af6bb7 Reviewed-on: http://gerrit.cloudera.org:8080/22806 Reviewed-by: Alexey Serbin <[email protected]> Tested-by: Abhishek Chennaka <[email protected]> (cherry picked from commit 4e5cd21da441444cf960e8fa53a71042b7be17c9) Reviewed-on: http://gerrit.cloudera.org:8080/22814 --- M src/kudu/integration-tests/ts_authz-itest.cc M src/kudu/master/ranger_authz_provider.cc 2 files changed, 47 insertions(+), 6 deletions(-) Approvals: Alexey Serbin: Looks good to me, approved Abhishek Chennaka: Verified -- To view, visit http://gerrit.cloudera.org:8080/22814 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: branch-1.18.x Gerrit-MessageType: merged Gerrit-Change-Id: I635132154d622eb41e993a0a1a818b21b5af6bb7 Gerrit-Change-Number: 22814 Gerrit-PatchSet: 2 Gerrit-Owner: Abhishek Chennaka <[email protected]> Gerrit-Reviewer: Abhishek Chennaka <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120)
