hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mingliang Liu (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-14274) Azure: Simplify Ranger-WASB policy model
Date Thu, 06 Apr 2017 19:45:42 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-14274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15959612#comment-15959612
] 

Mingliang Liu commented on HADOOP-14274:
----------------------------------------

Overall looks good.

# {{performAuthCheck}} should have javadoc for all parameters.
# Checkstyle warnings are related.
# As we're changing {{performAuthCheck}}, is it possible to use {{WasbAuthorizationOperations
accessType}} instead of {{String accessType}} as parameter of [{private void performAuthCheck()}}?
This seems cleaner.
# {{MockWasbAuthorizerImpl.java:66}}, let's use Map.Entry<> instead of HashMap.Entry<>.
We should always use the interface type unless we have good reasons. Plus, this fails in Java
7 as the HashMap.Entry is private.

Testing will happen and let's post test report here before commit.

> Azure: Simplify Ranger-WASB policy model
> ----------------------------------------
>
>                 Key: HADOOP-14274
>                 URL: https://issues.apache.org/jira/browse/HADOOP-14274
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: fs/azure
>            Reporter: Sivaguru Sankaridurg
>            Assignee: Sivaguru Sankaridurg
>         Attachments: HADOOP-14274-001.patch
>
>
> This improvement seeks to simplify the WASB-Ranger policy model -- both the policy specification
and policy enforcement.
> More specifically, WASB-Ranger checks do not follow the same policy model and enforcement
as Ranger-HDFS.
> Ranger-HDFS hands off to HDFS-ACLs when a policy-match is not found. The handoff requires
the Ranger policies follow the same model as HDFS-ACLs. This is not true with Ranger+WASB.
> We seek to simplify the policy specification and enforcement by dropping the 'x' bit
altogether.
> This JIRA tracks this improvement, alongwith a few more minor bugfixes that were found
during Ranger-WASB testing.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org


Mime
View raw message