[RANGER-1144] Policy engine optimization: quick skip of policy based on user/groups, accessTypes

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.5.4
• Component/s: plugins
• Assignee: Abhay Kulkarni
• Reporter: Madhan Neethiraj
• Created: 10/Aug/16 16:49
• Updated: 19/Mar/17 21:57
• Resolved: 24/Aug/16 01:11

Description

While evaluating an access request, policy engine can quickly skip a policy if the policy doesn't contain references to user/groups or accessType given in the access request. This optimization (method shown below) already exists in master and ranger-0.6 branch; this needs to be back ported to ranger-0.5:

RangerOptimizedPolicyEvaluator.hasMatchablePolicyItem(RangerAccessRequest request)