[HDFS-15850] Superuser actions should be reported to external enforcers

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.0
• Fix Version/s: 3.4.0
• Component/s: security
• Labels: pull-request-available
• Target Version/s: 3.4.0, 3.3.2
• Hadoop Flags: Reviewed
• Assignee: Vivek Ratnavel Subramanian
• Reporter: Vivek Ratnavel Subramanian
• Created: 22/Feb/21 18:59
• Updated: 27/Jan/24 02:52
• Resolved: 21/Apr/21 22:22

Description

Currently, HDFS superuser checks or actions are not reported to external enforcers like Ranger and the audit report provided by such external enforces are not complete and are missing the superuser actions. To fix this, add a new method to "AccessControlEnforcer" for all superuser checks. 

Issue Links

• links to: GitHub Pull Request #2784