Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-1146

Policy engine optimization: dynamic reordering of policy evaluation order

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 0.7.0, 0.6.2
    • Component/s: plugins
    • Labels:
      None

      Description

      During initialization, the policy engine sorts the policy evaluators such that the policies most likely to match many requests are evaluated at the top. To aid this ordering, a eval-score is computed for each policy based on the contents of the policy - like users/groups, accessTypes, resource-values, etc. However, this order may not be the most efficient for the access request pattern at runtime. It will help to reorder the policies dynamically based on the number of decisions made by each policy. For example, each time a policy determines the result of an access request, its hit-score should be incremented. Periodically the policies should be reordered to place policies that made most decisions at the top - so that fewer policies need to be evaluated to determine the access request.

        Attachments

          Activity

            People

            • Assignee:
              abhayk Abhay Kulkarni
              Reporter:
              madhan.neethiraj Madhan Neethiraj
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: