Repository: incubator-ranger Updated Branches: refs/heads/master df5a95e1b -> e9421a145
RANGER-1051 - Fall back to getting groups from user UGI in HBase plugin Signed-off-by: sneethiraj <sneet...@apache.org> Project: http://git-wip-us.apache.org/repos/asf/incubator-ranger/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-ranger/commit/e9421a14 Tree: http://git-wip-us.apache.org/repos/asf/incubator-ranger/tree/e9421a14 Diff: http://git-wip-us.apache.org/repos/asf/incubator-ranger/diff/e9421a14 Branch: refs/heads/master Commit: e9421a1459a7ea3014cc048df0b9e282c76b845c Parents: df5a95e Author: Colm O hEigeartaigh <cohei...@apache.org> Authored: Wed Jun 22 11:47:01 2016 +0100 Committer: sneethiraj <sneet...@apache.org> Committed: Mon Jul 11 10:32:48 2016 -0400 ---------------------------------------------------------------------- .../ranger/authorization/hbase/AuthorizationSession.java | 7 +++++++ 1 file changed, 7 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-ranger/blob/e9421a14/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/AuthorizationSession.java ---------------------------------------------------------------------- diff --git a/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/AuthorizationSession.java b/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/AuthorizationSession.java index fdf1527..3c31c09 100644 --- a/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/AuthorizationSession.java +++ b/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/AuthorizationSession.java @@ -35,6 +35,7 @@ import org.apache.ranger.plugin.service.RangerBasePlugin; import com.google.common.base.Objects; import com.google.common.collect.Lists; +import com.google.common.collect.Sets; public class AuthorizationSession { @@ -95,6 +96,12 @@ public class AuthorizationSession { _groups = null; } else { _groups = _userUtils.getUserGroups(_user); + if (_groups.isEmpty() && _user.getUGI() != null) { + String[] groups = _user.getUGI().getGroupNames(); + if (groups != null) { + _groups = Sets.newHashSet(groups); + } + } _superUser = _userUtils.isSuperUser(_user); } return this;
