[ https://issues.apache.org/jira/browse/RANGER-1553?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16630073#comment-16630073 ]
Mehul Parikh commented on RANGER-1553: -------------------------------------- Committed to [ranger-0.7|https://github.com/apache/ranger/commit/49d2962da60c896d1ceeadff39749e4efd2cd8e0] > Audit log record for 'show databases' hive command contains all tags > -------------------------------------------------------------------- > > Key: RANGER-1553 > URL: https://issues.apache.org/jira/browse/RANGER-1553 > Project: Ranger > Issue Type: Bug > Components: Ranger > Affects Versions: 1.0.0 > Reporter: Abhay Kulkarni > Assignee: Abhay Kulkarni > Priority: Major > Fix For: 1.0.0 > > > If hive service is associated with a tag service, then when a ‘show > databases’ command is authorized by Ranger, potentially, all tags associated > with all hive entities are evaluated to determine the authorization of the > command. Consequently, the audit log record generated for it will show, in > the tags field, every tag provisioned for any hive entity in Ranger. With > large number of tags associated with hive entities, the audit log is very > cluttered and does not convey meaningful information. For the sake of > usability, it will be better not to log all tags in the corresponding audit > log record for this specific command. -- This message was sent by Atlassian JIRA (v7.6.3#76005)