[ 
https://issues.apache.org/jira/browse/RANGER-1553?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16630073#comment-16630073
 ] 

Mehul Parikh commented on RANGER-1553:
--------------------------------------

Committed to 
[ranger-0.7|https://github.com/apache/ranger/commit/49d2962da60c896d1ceeadff39749e4efd2cd8e0]

> Audit log record for 'show databases' hive command contains all tags
> --------------------------------------------------------------------
>
>                 Key: RANGER-1553
>                 URL: https://issues.apache.org/jira/browse/RANGER-1553
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 1.0.0
>            Reporter: Abhay Kulkarni
>            Assignee: Abhay Kulkarni
>            Priority: Major
>             Fix For: 1.0.0
>
>
> If hive service is associated with a tag service, then when a ‘show 
> databases’ command is authorized by Ranger, potentially, all tags associated 
> with all hive entities are evaluated to determine the authorization of the 
> command. Consequently, the audit log record generated for it will show, in 
> the tags field, every tag provisioned for any hive entity in Ranger. With 
> large number of tags associated with hive entities, the audit log is very 
> cluttered and does not convey meaningful information. For the sake of 
> usability, it will be better not to log all tags in the corresponding audit 
> log record for this specific command.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to