ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Abhay Kulkarni <akulka...@hortonworks.com>
Subject Re: Review Request 65645: Hbase audit log records may not show all tags associated with accessed column
Date Thu, 15 Feb 2018 00:45:11 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/65645/
-----------------------------------------------------------

(Updated Feb. 15, 2018, 12:45 a.m.)


Review request for ranger, Madhan Neethiraj, Ramesh Mani, and Velmurugan Periasamy.


Changes
-------

Rolled back table level authorization checks (when table has no column-families) introduced
in previous revision.


Bugs: RANGER-1984
    https://issues.apache.org/jira/browse/RANGER-1984


Repository: ranger


Description
-------

When a Hbase column is tagged with a classification,with an active tag and resource policy
that allows access, the audit log does not show the tag.


Diffs (updated)
-----

  agents-common/src/main/java/org/apache/ranger/plugin/contextenricher/RangerTagForEval.java
b8f5b42 
  agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerTagAccessRequest.java
dbdcacd 
  agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerDefaultPolicyEvaluator.java
8051ec3 
  agents-common/src/test/resources/policyengine/test_policyengine_tag_hdfs.json b4941cd 
  hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java
058168f 
  hbase-agent/src/test/java/org/apache/ranger/authorization/hbase/HBaseRangerAuthorizationTest.java
198aad9 


Diff: https://reviews.apache.org/r/65645/diff/3/

Changes: https://reviews.apache.org/r/65645/diff/2-3/


Testing
-------

Tested with local VM


Thanks,

Abhay Kulkarni


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message