impala-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Fredy Wijaya (Code Review)" <ger...@cloudera.org>
Subject [Impala-ASF-CR] IMPALA-8400: Implement Ranger audit event handler
Date Wed, 15 May 2019 01:19:39 GMT
Fredy Wijaya has uploaded a new patch set (#6). ( http://gerrit.cloudera.org:8080/13309 )

Change subject: IMPALA-8400: Implement Ranger audit event handler
......................................................................

IMPALA-8400: Implement Ranger audit event handler

This patch implements Ranger audit event handler to behave similarly to
the Hive/Ranger audit event handler, most notably:
- Buffer the audit events during authorization and only flush them once
  the authorization is complete.
- The audit will only add the event for the first failure.

Testing:
- Added test cases in RangerAuditLogTest
- Ran FE tests
- Ran all E2E authorization tests

Change-Id: Ife93c3e708875ef5fc0117153ad8ee225a88518b
---
M fe/src/main/java/org/apache/impala/analysis/AnalysisContext.java
M fe/src/main/java/org/apache/impala/authorization/AuthorizationChecker.java
A fe/src/main/java/org/apache/impala/authorization/AuthorizationContext.java
M fe/src/main/java/org/apache/impala/authorization/BaseAuthorizationChecker.java
M fe/src/main/java/org/apache/impala/authorization/NoopAuthorizationFactory.java
M fe/src/main/java/org/apache/impala/authorization/ranger/RangerAuthorizationChecker.java
A fe/src/main/java/org/apache/impala/authorization/ranger/RangerAuthorizationContext.java
M fe/src/main/java/org/apache/impala/authorization/ranger/RangerCatalogdAuthorizationManager.java
A fe/src/main/java/org/apache/impala/authorization/ranger/RangerImpalaAuditHandler.java
M fe/src/main/java/org/apache/impala/authorization/ranger/RangerImpaladAuthorizationManager.java
M fe/src/main/java/org/apache/impala/authorization/sentry/SentryAuthorizationChecker.java
M fe/src/test/java/org/apache/impala/authorization/AuthorizationStmtTest.java
M fe/src/test/java/org/apache/impala/authorization/AuthorizationTest.java
A fe/src/test/java/org/apache/impala/authorization/AuthorizationTestBase.java
A fe/src/test/java/org/apache/impala/authorization/ranger/RangerAuditLogTest.java
M fe/src/test/java/org/apache/impala/common/FrontendTestBase.java
16 files changed, 1,448 insertions(+), 826 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/09/13309/6
-- 
To view, visit http://gerrit.cloudera.org:8080/13309
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ife93c3e708875ef5fc0117153ad8ee225a88518b
Gerrit-Change-Number: 13309
Gerrit-PatchSet: 6
Gerrit-Owner: Fredy Wijaya <fwijaya@cloudera.com>
Gerrit-Reviewer: Austin Nobis <anobis@cloudera.com>
Gerrit-Reviewer: Fredy Wijaya <fwijaya@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <impala-public-jenkins@cloudera.com>
Gerrit-Reviewer: Todd Lipcon <todd@apache.org>

Mime
  • Unnamed multipart/alternative (inline, 8-Bit, 0 bytes)
View raw message