[RANGER-1738] RangerYarnAuthorizer not compatible with Hadoop-3.0.0

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.7.1
• Fix Version/s: 2.0.0
• Component/s: plugins
• Assignee: Colm O hEigeartaigh
• Reporter: shenh062326
• Created: 17/Aug/17 10:52
• Updated: 28/Feb/19 10:44
• Resolved: 28/Feb/19 10:44

Description

In the newest hadoop version 3.0.0, YarnAuthorizationProvider has changed.
The new YarnAuthorizationProvider.java has change the methods checkPermission and setPermission,

YarnAuthorizationProvider.java

  /**
   * Check if user has the permission to access the target object.
   * 
   * @param accessRequest
   *          the request object which contains all the access context info.
   * @return true if user can access the object, otherwise false.
   */

  public abstract boolean checkPermission(AccessRequest accessRequest);

  /**
   * Set permissions for the target object.
   *
   * @param permissions
   *        A list of permissions on the target object.
   * @param ugi User who sets the permissions.
   */
  public abstract void setPermission(List<Permission> permissions,
      UserGroupInformation ugi);

But the RangerYarnAuthorizer extends YarnAuthorizationProvider impletement the old method.

RangerYarnAuthorizer.java

	@Override
	public void setPermission(PrivilegedEntity entity, Map<AccessType, AccessControlList> permission, UserGroupInformation ugi) {
       ...
	@Override
	public boolean checkPermission(AccessType accessType, PrivilegedEntity entity, UserGroupInformation ugi) {

I think yarn plugin should also impletement the new method. I will add a patch for it.

Issue Links

• is duplicated by: RANGER-1236 RangerYarnAuthorizer should be updated since YarnAuthorizationProvider modified in YARN-4571
• is related to: RANGER-1935 Upgrade Ranger to support Apache Hadoop 3.0.0
• relates to: RANGER-1935 Upgrade Ranger to support Apache Hadoop 3.0.0
• links to: Review Request