Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-7916 Support for Apache Ranger authorization provider
  3. IMPALA-8671

Do not re-create a new instance of AuthorizationChecker with Ranger authorization

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Critical
    • Resolution: Fixed
    • None
    • Impala 3.3.0
    • Frontend
    • None
    • ghx-label-8

    Description

      RangerAuthorizationChecker is stateless unlike SentryAuthorizationChecker. However, in some cases, we always re-create a new instance of RangerAuthorizationChecker due to the logic here: https://github.com/apache/impala/blob/3bd53972cec3b8a863075cb2344115a950be848a/fe/src/main/java/org/apache/impala/service/Frontend.java#L290-L293. This causes the plugin to be re-initialized, which can be expensive. The solution is to reuse the same RangerAuthorizationChecker instance.

      Attachments

        Activity

          People

            fredyw Fredy Wijaya
            fredyw Fredy Wijaya
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: