Details
-
Task
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
-
None
-
ghx-label-14
Description
It would be nice to be able to support locally built Ranger in Impala's minicluster in that it would facilitate the testing of features that require changes to both components.
Edit:
Making the current Apache Impala on master (tip is
IMPALA-12925: Fix decimal data type for external JDBC table) to support Ranger on master (tip isĀ
RANGER-4745: Enhance handling of subAccess authorization in Ranger HDFS plugin) may be too ambitious.
The signatures of some classes are already incompatible. For instance, on the Impala side, Impala instantiates the instance of RangerAccessRequestImpl via the following code. 4 input arguments are needed.
RangerAccessRequest req = new RangerAccessRequestImpl(resource,
SELECT_ACCESS_TYPE, user.getShortName(), getUserGroups(user));
However, the current signature of RangerAccessRequestImpl's constructor on the master of Apache Ranger is the following. It can be seen we need 5 input arguments instead.
public RangerAccessRequestImpl(RangerAccessResource resource, String accessType, String user, Set<String> userGroups, Set<String> userRoles)
It may be more practical to support Ranger on an earlier version, e.g., https://github.com/apache/ranger/blob/release-ranger-2.4.0.
Attachments
Issue Links
- is blocked by
-
RANGER-4770 Make RangerAccessRequestImpl backward compatible after RANGER-2763
- Open
-
RANGER-4771 Remove the calls to ensureAdminAccess() in grantAccess() and revokeAccess()
- Open