ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Sailaja Polavarapu <spolavar...@hortonworks.com>
Subject Review Request 65739: RANGER-1985: Auditing for Ranger usersync operations
Date Wed, 21 Feb 2018 21:33:56 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/65739/
-----------------------------------------------------------

Review request for ranger, Ankita Sinha, Gautam Borad, Abhay Kulkarni, Madhan Neethiraj, Pradeep
Agrawal, Ramesh Mani, Selvamohan Neethiraj, Sailaja Polavarapu, and Velmurugan Periasamy.


Bugs: RANGER-1985
    https://issues.apache.org/jira/browse/RANGER-1985


Repository: ranger


Description
-------

Added code to support auditing for Ranger Usersync operations. This includes auditing for
all the sync sources (unix, file, and LDAP/AD) for every sync interval. Also includes Rest
API for showing these audits in Ranger UI.


Diffs
-----

  security-admin/src/main/java/org/apache/ranger/biz/AssetMgr.java 034053d 
  security-admin/src/main/java/org/apache/ranger/biz/XUserMgr.java cecb3f8 
  security-admin/src/main/java/org/apache/ranger/common/AppConstants.java 4a02e26 
  security-admin/src/main/java/org/apache/ranger/db/RangerDaoManagerBase.java db20a14 
  security-admin/src/main/java/org/apache/ranger/db/XXUgsyncAuditInfoDao.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/entity/XXUgsyncAuditInfo.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/rest/AssetREST.java 3c274e3 
  security-admin/src/main/java/org/apache/ranger/rest/XUserREST.java a07c243 
  security-admin/src/main/java/org/apache/ranger/security/context/RangerAPIList.java 460c7fd

  security-admin/src/main/java/org/apache/ranger/service/XUgsyncAuditInfoService.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/service/XUgsyncAuditInfoServiceBase.java
PRE-CREATION 
  security-admin/src/main/java/org/apache/ranger/view/VXFileSyncSourceInfo.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/view/VXLdapSyncSourceInfo.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/view/VXUgsyncAuditInfo.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/view/VXUgsyncAuditInfoList.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/view/VXUnixSyncSourceInfo.java PRE-CREATION

  security-admin/src/main/resources/META-INF/jpa_named_queries.xml 786b4bf 
  security-admin/src/main/resources/META-INF/persistence.xml 20f5bba 
  ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapDeltaUserGroupBuilder.java
2852b32 
  ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapPolicyMgrUserGroupBuilder.java
18366ef 
  ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapUserGroupBuilder.java 6b2648d

  ugsync/src/main/java/org/apache/ranger/unixusersync/model/FileSyncSourceInfo.java PRE-CREATION

  ugsync/src/main/java/org/apache/ranger/unixusersync/model/LdapSyncSourceInfo.java PRE-CREATION

  ugsync/src/main/java/org/apache/ranger/unixusersync/model/UgsyncAuditInfo.java PRE-CREATION

  ugsync/src/main/java/org/apache/ranger/unixusersync/model/UnixSyncSourceInfo.java PRE-CREATION

  ugsync/src/main/java/org/apache/ranger/unixusersync/process/FileSourceUserGroupBuilder.java
713c868 
  ugsync/src/main/java/org/apache/ranger/unixusersync/process/PolicyMgrUserGroupBuilder.java
864d884 
  ugsync/src/main/java/org/apache/ranger/unixusersync/process/UnixUserGroupBuilder.java 60ce08d

  ugsync/src/main/java/org/apache/ranger/usergroupsync/UserGroupSink.java 494efc2 


Diff: https://reviews.apache.org/r/65739/diff/1/


Testing
-------

1. Tested with different types of sync sources (Unix, File, and LDAP/AD)
2. Also tested with incremental sync enabled for AD sync source.
3. Tested the Rest API for showing audits in Ranger UI.


Thanks,

Sailaja Polavarapu


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message