[IMPALA-9047] Some Ranger related test cases fail when using a newer version of Ranger

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Impala 3.4.0
• Component/s: Frontend
• Epic Color: ghx-label-6
• Assignee: Fang-Yu Rao
• Reporter: Fang-Yu Rao
• Created: 15/Oct/19 16:31
• Updated: 30/Jan/20 23:25
• Resolved: 12/Nov/19 18:22

Description

Some Ranger related E2E tests and FE tests would fail when we are using a newer version of Ranger (e.g., ranger-2.0.0.7.0.2.0-98 instead of ranger-1.2.0.7.1.0.0-33) due to the changes to the default Ranger policies described at https://issues.apache.org/jira/browse/RANGER-2536. In the attachment the screenshots of the policies of "all - database, table, column" before and after using the newer Ranger are also provided.

Some operations which were not authorized previously could now be authorized successfully because of the changes. In this regard, we also have to change the test cases in at least 4 files of Impala's E2E tests and FE tests, which are listed in the following.

1. test_authorized_proxy.py
2. test_ranger.py
3. AuthorizationStmtTest.java
4. RangerAuditLogTest.java

Issue Links

• is related to: IMPALA-9094 Update test_hms_integration.py test_compute_stats_get_to_hive to account for separate Hive/Impala statistics