Major Description
Currently when there is a trailing slash in the ranger URL policy in Hive, it doesn't authorizer the URL request. The trailing slash has to be remove to have the authorization done correctly.
e.g.
1) URL policy is maintained for "hdfs://node1.site/test/data/" with or without recursive on.
2) Authorization request from Hive always comes without the trailing slash ( hdfs://node1.site/test/data) and this result in authorization failure.
Url policy with or without trailing slash has to behave the same way. As per POSIX perspective "hdfs://node1.site/test/data/" and "hdfs://node1.site/test/data" are same and the policy has to authorize the request correctly.
Attachments
Issue Links
- links to
