Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-1695

Optimize Ranger code for authorization of HDFS 'getContentSummary' and 'delete' commands

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 0.7.1
    • 1.0.0, master, 0.7.2
    • Ranger
    • None

    Description

      HDFS commands such as getContentSummary and delete require Ranger to authorize access to entire directory hierarchy rooted at the directory passed in as argument. Ranger could optimize this code by pruning the directory tree whenever a sub-directory, and directory hierarchy rooted in it, is authorized for requested access. This could potentially save many spurious authorization API calls with Ranger policy engine.
      Also, it will be useful to gather and log performance metrics for the Ranger authorization API call for every Ranger plugin.

      Attachments

        Activity

          People

            abhayk Abhay Kulkarni
            abhayk Abhay Kulkarni
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: