[jira] [Resolved] (RANGER-1669) We need to support the original functionality of hive:show grant user username

2017-07-26 Thread Qiang Zhang (JIRA)

 [ 
https://issues.apache.org/jira/browse/RANGER-1669?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Qiang Zhang resolved RANGER-1669.
-
   Resolution: Fixed
Fix Version/s: (was: master)
   1.0.0

> We need to support the original functionality of hive:show grant user username
> --
>
> Key: RANGER-1669
> URL: https://issues.apache.org/jira/browse/RANGER-1669
> Project: Ranger
>  Issue Type: New Feature
>  Components: plugins
>Affects Versions: 1.0.0
>Reporter: peng.jianhua
>Assignee: peng.jianhua
>Priority: Critical
> Fix For: 1.0.0
>
> Attachments: 
> 0001-RANGER-1669-We-need-to-support-the-original-function.patch, 
> show-grant-error.png, show-grant-user-sucess.png
>
>
> We need to support the original functionality of hive,
> 1.Scene: the original hive supports sql:show grant user glc;
> 2.Error:0: jdbc:hive2://10.43.182.241:1> show grant user glc;
> Error: Error while processing statement: FAILED: Execution Error, return code 
> 1 from org.apache.hadoop.hive.ql.exec.DDLTask. showPrivileges() not 
> implemented in Ranger HiveAuthorizer (state=08S01,code=1)
> 3.Solution:When you integrate the Ranger plug-in into hive, you can't execute 
> show grant user glc;
> Modify RangerHiveAuthorizerBase.java to achieve the specific implementation 
> of showPrivileges,
> 4.The modified results can continue to support the original functionality of 
> the hive.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Resolved] (RANGER-1709) kms test case write logs to log file

2017-07-26 Thread Qiang Zhang (JIRA)

 [ 
https://issues.apache.org/jira/browse/RANGER-1709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Qiang Zhang resolved RANGER-1709.
-
   Resolution: Fixed
Fix Version/s: 1.0.0

> kms test case write logs to log file
> 
>
> Key: RANGER-1709
> URL: https://issues.apache.org/jira/browse/RANGER-1709
> Project: Ranger
>  Issue Type: Bug
>  Components: kms
>Reporter: peng.jianhua
>Assignee: peng.jianhua
>Priority: Minor
>  Labels: patch
> Fix For: 1.0.0
>
> Attachments: 
> 0001-RANGER-1709-kms-test-case-write-logs-to-log-file.patch
>
>
> kms test case support writing logs to log file.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


Re: Review Request 61035: RANGER-1706: Adding travis.yml to run the tests

2017-07-26 Thread Zsombor Gegesy


> On July 26, 2017, 12:08 p.m., Colm O hEigeartaigh wrote:
> > Was there a specific reason for the surefire upgrade?

Yes, it is needed for disabling the failing test cases


- Zsombor


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/61035/#review181450
---


On July 25, 2017, 9:10 p.m., Zsombor Gegesy wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/61035/
> ---
> 
> (Updated July 25, 2017, 9:10 p.m.)
> 
> 
> Review request for ranger.
> 
> 
> Bugs: RANGER-1706
> https://issues.apache.org/jira/browse/RANGER-1706
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Travis is a CI system, which can automatically run and validate the source 
> code
> 
> 
> Diffs
> -
> 
>   .travis.yml PRE-CREATION 
>   pom.xml 7ae0217 
> 
> 
> Diff: https://reviews.apache.org/r/61035/diff/2/
> 
> 
> Testing
> ---
> 
> Successful build on travis:
> https://travis-ci.org/gzsombor/ranger/builds/255768716
> 
> 
> Thanks,
> 
> Zsombor Gegesy
> 
>



Re: Review Request 60949: Optimize Ranger code for authorization of HDFS 'getContentSummary' and 'delete' commands

2017-07-26 Thread Madhan Neethiraj

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/60949/#review181466
---


Ship it!




Ship It!

- Madhan Neethiraj


On July 25, 2017, 10:22 p.m., Abhay Kulkarni wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/60949/
> ---
> 
> (Updated July 25, 2017, 10:22 p.m.)
> 
> 
> Review request for ranger and Madhan Neethiraj.
> 
> 
> Bugs: RANGER-1695
> https://issues.apache.org/jira/browse/RANGER-1695
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> HDFS commands such as getContentSummary and delete require Ranger to 
> authorize access to entire directory hierarchy rooted at the directory passed 
> in as argument. Ranger could optimize this code by pruning the directory tree 
> whenever a sub-directory, and directory hierarchy rooted in it, is authorized 
> for requested access. This could potentially save many spurious authorization 
> API calls with Ranger policy engine.
> Also, it will be useful to gather and log performance metrics for the Ranger 
> authorization API call for every Ranger plugin.
> 
> 
> Diffs
> -
> 
>   
> agents-common/src/main/java/org/apache/ranger/authorization/hadoop/constants/RangerHadoopConstants.java
>  83f720a 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineImpl.java
>  c72c8b5 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineOptions.java
>  63162f6 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/service/RangerBasePlugin.java
>  06b8f4d 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/util/RangerPerfCollectorTracer.java
>  d899c6f 
>   
> hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java
>  cf2ffcf 
>   
> hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java
>  d28685a 
>   
> hdfs-agent/src/test/java/org/apache/ranger/services/hdfs/HDFSRangerTest.java 
> fe6a705 
>   hdfs-agent/src/test/resources/hdfs-policies.json 6055dd5 
>   hdfs-agent/src/test/resources/log4j.properties PRE-CREATION 
>   hdfs-agent/src/test/resources/ranger-hdfs-security.xml 9b1176e 
>   
> hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
>  56ef187 
>   
> knox-agent/src/main/java/org/apache/ranger/authorization/knox/RangerPDPKnoxFilter.java
>  1d58b21 
>   
> plugin-atlas/src/main/java/org/apache/ranger/authorization/atlas/authorizer/RangerAtlasAuthorizer.java
>  9712f95 
>   
> plugin-kafka/src/main/java/org/apache/ranger/authorization/kafka/authorizer/RangerKafkaAuthorizer.java
>  b6e052f 
>   
> plugin-kms/src/main/java/org/apache/ranger/authorization/kms/authorizer/RangerKmsAuthorizer.java
>  4cda8fa 
>   
> plugin-solr/src/main/java/org/apache/ranger/authorization/solr/authorizer/RangerSolrAuthorizer.java
>  0cc9de9 
>   
> plugin-yarn/src/main/java/org/apache/ranger/authorization/yarn/authorizer/RangerYarnAuthorizer.java
>  c589060 
>   ranger-tools/conf/log4j.properties 4ead802 
>   
> ranger-tools/src/main/java/org/apache/ranger/policyengine/RangerPolicyenginePerfTester.java
>  056c548 
>   
> storm-agent/src/main/java/org/apache/ranger/authorization/storm/authorizer/RangerStormAuthorizer.java
>  23c2b5f 
> 
> 
> Diff: https://reviews.apache.org/r/60949/diff/2/
> 
> 
> Testing
> ---
> 
> Tested with local VM
> 
> 
> Thanks,
> 
> Abhay Kulkarni
> 
>



Re: Review Request 61035: RANGER-1706: Adding travis.yml to run the tests

2017-07-26 Thread Colm O hEigeartaigh

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/61035/#review181450
---



Was there a specific reason for the surefire upgrade?

- Colm O hEigeartaigh


On July 25, 2017, 9:10 p.m., Zsombor Gegesy wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/61035/
> ---
> 
> (Updated July 25, 2017, 9:10 p.m.)
> 
> 
> Review request for ranger.
> 
> 
> Bugs: RANGER-1706
> https://issues.apache.org/jira/browse/RANGER-1706
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Travis is a CI system, which can automatically run and validate the source 
> code
> 
> 
> Diffs
> -
> 
>   .travis.yml PRE-CREATION 
>   pom.xml 7ae0217 
> 
> 
> Diff: https://reviews.apache.org/r/61035/diff/2/
> 
> 
> Testing
> ---
> 
> Successful build on travis:
> https://travis-ci.org/gzsombor/ranger/builds/255768716
> 
> 
> Thanks,
> 
> Zsombor Gegesy
> 
>



Re: Review Request 61106: kms test case write logs to log file

2017-07-26 Thread Colm O hEigeartaigh

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/61106/#review181449
---


Ship it!




Ship It!

- Colm O hEigeartaigh


On July 26, 2017, 3:33 a.m., pengjianhua wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/61106/
> ---
> 
> (Updated July 26, 2017, 3:33 a.m.)
> 
> 
> Review request for ranger, Alok Lal, Ankita Sinha, Don Bosco Durai, Colm O 
> hEigeartaigh, Gautam Borad, Madhan Neethiraj, Ramesh Mani, Selvamohan 
> Neethiraj, Velmurugan Periasamy, and Qiang Zhang.
> 
> 
> Bugs: RANGER-1709
> https://issues.apache.org/jira/browse/RANGER-1709
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> kms test case write logs to log file
> 
> 
> Diffs
> -
> 
>   
> plugin-kms/src/test/java/org/apache/ranger/authorization/kms/authorizer/RangerKmsAuthorizerTest.java
>  4c2d242 
>   plugin-kms/src/test/resources/kms/kms-log4j.properties PRE-CREATION 
>   plugin-kms/src/test/resources/kms/kms-site.xml 5f2575a 
> 
> 
> Diff: https://reviews.apache.org/r/61106/diff/2/
> 
> 
> Testing
> ---
> 
> 
> Thanks,
> 
> pengjianhua
> 
>



Re: Review Request 61021: RANGER-1672:Ranger supports plugin to enable, monitor and manage apache kylin

2017-07-26 Thread Colm O hEigeartaigh


> On July 25, 2017, 1:56 p.m., Pradeep Agrawal wrote:
> > pom.xml
> > Lines 217 (patched)
> > 
> >
> > mvn build is not working for me. Can you please add steps to build 
> > Ranger admin with this patch.
> 
> Qiang Zhang wrote:
> This patch relies on kylin's new patch,
> please refer kylin issue : 
> https://issues.apache.org/jira/browse/KYLIN-2703,
> therefore, you need to apply the kylin patch first, and build kylin with 
> viersion 2.1.0-SNAPSHOT,
> then you can build Ranger admin with this patch.

How likely is it that a Kylin release containing KYLIN-2703 will be available 
before we release Ranger 1.0.0?


- Colm


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/61021/#review181341
---


On July 21, 2017, 7:40 a.m., Qiang Zhang wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/61021/
> ---
> 
> (Updated July 21, 2017, 7:40 a.m.)
> 
> 
> Review request for ranger, Ankita Sinha, Don Bosco Durai, Colm O 
> hEigeartaigh, Gautam Borad, Madhan Neethiraj, Ramesh Mani, Selvamohan 
> Neethiraj, sam  rome, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-1672
> https://issues.apache.org/jira/browse/RANGER-1672
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Ranger supports plugin to enable, monitor and manage apache kylin
> 
> 
> Diffs
> -
> 
>   agents-common/scripts/enable-agent.sh d31a264 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/store/EmbeddedServiceDefsUtil.java
>  0bc09f6 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/util/PasswordUtils.java 
> 58cdd35 
>   agents-common/src/main/resources/service-defs/ranger-servicedef-kylin.json 
> PRE-CREATION 
>   plugin-kylin/.gitignore PRE-CREATION 
>   plugin-kylin/conf/ranger-kylin-audit-changes.cfg PRE-CREATION 
>   plugin-kylin/conf/ranger-kylin-audit.xml PRE-CREATION 
>   plugin-kylin/conf/ranger-kylin-security-changes.cfg PRE-CREATION 
>   plugin-kylin/conf/ranger-kylin-security.xml PRE-CREATION 
>   plugin-kylin/conf/ranger-policymgr-ssl-changes.cfg PRE-CREATION 
>   plugin-kylin/conf/ranger-policymgr-ssl.xml PRE-CREATION 
>   plugin-kylin/pom.xml PRE-CREATION 
>   plugin-kylin/scripts/install.properties PRE-CREATION 
>   
> plugin-kylin/src/main/java/org/apache/ranger/authorization/kylin/authorizer/RangerKylinAuthorizer.java
>  PRE-CREATION 
>   
> plugin-kylin/src/main/java/org/apache/ranger/services/kylin/RangerServiceKylin.java
>  PRE-CREATION 
>   
> plugin-kylin/src/main/java/org/apache/ranger/services/kylin/client/KylinClient.java
>  PRE-CREATION 
>   
> plugin-kylin/src/main/java/org/apache/ranger/services/kylin/client/KylinConnectionMgr.java
>  PRE-CREATION 
>   
> plugin-kylin/src/main/java/org/apache/ranger/services/kylin/client/KylinResourceMgr.java
>  PRE-CREATION 
>   
> plugin-kylin/src/main/java/org/apache/ranger/services/kylin/client/json/model/KylinCubeResponse.java
>  PRE-CREATION 
>   
> plugin-kylin/src/main/java/org/apache/ranger/services/kylin/client/json/model/KylinProjectResponse.java
>  PRE-CREATION 
>   pom.xml 3fcc4aa 
>   ranger-kylin-plugin-shim/.gitignore PRE-CREATION 
>   ranger-kylin-plugin-shim/pom.xml PRE-CREATION 
>   
> ranger-kylin-plugin-shim/src/main/java/org/apache/ranger/authorization/kylin/authorizer/RangerKylinAuthorizer.java
>  PRE-CREATION 
>   security-admin/src/main/java/org/apache/ranger/biz/ServiceDBStore.java 
> 9742265 
>   security-admin/src/main/java/org/apache/ranger/biz/ServiceMgr.java 722a566 
>   security-admin/src/main/java/org/apache/ranger/rest/XUserREST.java 6e9161e 
>   security-admin/src/main/webapp/scripts/modules/globalize/message/en.js 
> af7bdfe 
>   security-admin/src/main/webapp/scripts/views/policies/PermissionList.js 
> 067bf3b 
>   security-admin/src/main/webapp/scripts/views/policies/RangerPolicyForm.js 
> 6f27d5d 
>   src/main/assembly/admin-web.xml cb1aad2 
>   src/main/assembly/plugin-kylin.xml PRE-CREATION 
> 
> 
> Diff: https://reviews.apache.org/r/61021/diff/1/
> 
> 
> Testing
> ---
> 
> Tested
> 
> 
> Thanks,
> 
> Qiang Zhang
> 
>