[RANGER-3298] Add coarse URI check for Hive Agent

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0, 2.3.0
• Component/s: plugins
• Assignee: Unassigned
• Reporter: Janus Chow
• Created: 27/May/21 16:12
• Updated: 16/Apr/22 06:10
• Resolved: 08/Dec/21 06:27

Description

In `RangerHiveAuthorizer`, the function of `checkPrivileges` will check the permission for the `HivePrivilegeObject` with `FileUtils.isActionPermittedForFileHierarchy`, and this method will check the permission for all the files under the related directory by default.

For a large table with thousands of files, this operation will take a long time, leading to breaking the SLA. Besides, in the default implementation of `StorageBasedAuthorizationProvider` in Hive, only the directories will be checked too. 

This ticket is to add a config for users to do a coarse check for URI permission check. 

Issue Links

• links to: review request