[HADOOP-14274] Azure: Simplify Ranger-WASB policy model

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.9.0, 3.0.0-alpha4
• Component/s: fs/azure
• Target Version/s: 2.9.0, 3.0.0-alpha4
• Hadoop Flags: Reviewed
• Assignee: Sivaguru Sankaridurg
• Reporter: Sivaguru Sankaridurg
• Created: 04/Apr/17 12:00
• Updated: 17/May/17 00:32
• Resolved: 12/Apr/17 23:19

Description

This improvement seeks to simplify the WASB-Ranger policy model – both the policy specification and policy enforcement.
More specifically, WASB-Ranger checks do not follow the same policy model and enforcement as Ranger-HDFS.

Ranger-HDFS hands off to HDFS-ACLs when a policy-match is not found. The handoff requires the Ranger policies follow the same model as HDFS-ACLs. This is not true with Ranger+WASB.

We seek to simplify the policy specification and enforcement by dropping the 'x' bit altogether.

This JIRA tracks this improvement, alongwith a few more minor bugfixes that were found during Ranger-WASB testing.