[
https://issues.apache.org/jira/browse/HADOOP-14274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16013309#comment-16013309
]
Mingliang Liu commented on HADOOP-14274:
----------------------------------------
[~sisan...@microsoft.com] can you add releases notes for this JIRA? That should
summarize major changes, and be helpful for others to get the context. Thanks,
> Azure: Simplify Ranger-WASB policy model
> ----------------------------------------
>
> Key: HADOOP-14274
> URL: https://issues.apache.org/jira/browse/HADOOP-14274
> Project: Hadoop Common
> Issue Type: Improvement
> Components: fs/azure
> Reporter: Sivaguru Sankaridurg
> Assignee: Sivaguru Sankaridurg
> Fix For: 2.9.0, 3.0.0-alpha3
>
> Attachments: HADOOP-14274-001.patch, HADOOP-14274.002.patch,
> HADOOP-14274.003.patch, TestingForRegressionWithSecureModeSwitchedOff.txt,
> TestingWithSecureModeSwitchedOnSuccess.txt
>
>
> This improvement seeks to simplify the WASB-Ranger policy model -- both the
> policy specification and policy enforcement.
> More specifically, WASB-Ranger checks do not follow the same policy model and
> enforcement as Ranger-HDFS.
> Ranger-HDFS hands off to HDFS-ACLs when a policy-match is not found. The
> handoff requires the Ranger policies follow the same model as HDFS-ACLs. This
> is not true with Ranger+WASB.
> We seek to simplify the policy specification and enforcement by dropping the
> 'x' bit altogether.
> This JIRA tracks this improvement, alongwith a few more minor bugfixes that
> were found during Ranger-WASB testing.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org
