ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Colm O hEigeartaigh <cohei...@apache.org>
Subject Re: Review Request 61062: RANGER-1707 : fix hdfs traverse check
Date Wed, 22 Nov 2017 14:35:08 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/61062/#review191736
-----------------------------------------------------------


Ship it!




Ship It!

- Colm O hEigeartaigh


On Nov. 22, 2017, 12:39 p.m., Zsombor Gegesy wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/61062/
> -----------------------------------------------------------
> 
> (Updated Nov. 22, 2017, 12:39 p.m.)
> 
> 
> Review request for ranger.
> 
> 
> Bugs: RANGER-1707
>     https://issues.apache.org/jira/browse/RANGER-1707
> 
> 
> Repository: ranger
> 
> 
> Description
> -------
> 
> Fix hdfs traverse check, which problem was hidden before hdfs 2.8.0, where the traverse
checks are called
>      before reading and writing files, so if a policy is just about reading /tmp/somedir/somefile
>      it means, that traverse should be allowed to get to that file. Adding more tests
to highlight the issue
> 
> 
> Diffs
> -----
> 
>   hdfs-agent/pom.xml 9f6206013 
>   hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java
af4d9b5c2 
>   hdfs-agent/src/test/java/org/apache/ranger/services/hdfs/RangerHdfsAuthorizerTest.java
PRE-CREATION 
> 
> 
> Diff: https://reviews.apache.org/r/61062/diff/3/
> 
> 
> Testing
> -------
> 
> Tested locally
> https://travis-ci.org/gzsombor/ranger/builds/256331500
> 
> 
> Thanks,
> 
> Zsombor Gegesy
> 
>


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message