Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-14274

Azure: Simplify Ranger-WASB policy model

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 2.9.0, 3.0.0-alpha4
    • fs/azure
    • None

    Description

      This improvement seeks to simplify the WASB-Ranger policy model – both the policy specification and policy enforcement.
      More specifically, WASB-Ranger checks do not follow the same policy model and enforcement as Ranger-HDFS.

      Ranger-HDFS hands off to HDFS-ACLs when a policy-match is not found. The handoff requires the Ranger policies follow the same model as HDFS-ACLs. This is not true with Ranger+WASB.

      We seek to simplify the policy specification and enforcement by dropping the 'x' bit altogether.

      This JIRA tracks this improvement, alongwith a few more minor bugfixes that were found during Ranger-WASB testing.

      Attachments

        1. HADOOP-14274.002.patch
          51 kB
          Sivaguru Sankaridurg
        2. HADOOP-14274.003.patch
          52 kB
          Sivaguru Sankaridurg
        3. HADOOP-14274-001.patch
          51 kB
          Sivaguru Sankaridurg
        4. TestingForRegressionWithSecureModeSwitchedOff.txt
          15 kB
          Sivaguru Sankaridurg
        5. TestingWithSecureModeSwitchedOnSuccess.txt
          35 kB
          Sivaguru Sankaridurg

        Activity

          People

            sisankar@microsoft.com Sivaguru Sankaridurg
            sisankar@microsoft.com Sivaguru Sankaridurg
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: