Hi, We are evaluating Ranger for authorization over our existing hadoop cluster. Had some doubts:
1. I wonder , is ranger auth a substitute of HDFS authorization (FSPermissionChecker) or a layer above it? 2. If the hdfs and ranger rules are conflicting, eg: ranger allows but hdfs denies, which rule will be used? 3. Does Ranger work with NN federation? I was going through many articles but was unable to get these answers, it would be great if someone can help me here. Thanks in advance, Ravi