Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-14274

Azure: Simplify Ranger-WASB policy model

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.9.0, 3.0.0-alpha4
    • Component/s: fs/azure
    • Labels:
      None

      Description

      This improvement seeks to simplify the WASB-Ranger policy model – both the policy specification and policy enforcement.
      More specifically, WASB-Ranger checks do not follow the same policy model and enforcement as Ranger-HDFS.

      Ranger-HDFS hands off to HDFS-ACLs when a policy-match is not found. The handoff requires the Ranger policies follow the same model as HDFS-ACLs. This is not true with Ranger+WASB.

      We seek to simplify the policy specification and enforcement by dropping the 'x' bit altogether.

      This JIRA tracks this improvement, alongwith a few more minor bugfixes that were found during Ranger-WASB testing.

        Attachments

        1. HADOOP-14274.002.patch
          51 kB
          Sivaguru Sankaridurg
        2. HADOOP-14274.003.patch
          52 kB
          Sivaguru Sankaridurg
        3. HADOOP-14274-001.patch
          51 kB
          Sivaguru Sankaridurg
        4. TestingForRegressionWithSecureModeSwitchedOff.txt
          15 kB
          Sivaguru Sankaridurg
        5. TestingWithSecureModeSwitchedOnSuccess.txt
          35 kB
          Sivaguru Sankaridurg

          Activity

            People

            • Assignee:
              sisankar@microsoft.com Sivaguru Sankaridurg
              Reporter:
              sisankar@microsoft.com Sivaguru Sankaridurg
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: