Abhay Kulkarni created RANGER-2297: -------------------------------------- Summary: getContentSummary validation failure Key: RANGER-2297 URL: https://issues.apache.org/jira/browse/RANGER-2297 Project: Ranger Issue Type: Bug Components: Ranger Affects Versions: 1.2.0 Reporter: Abhay Kulkarni Assignee: Abhay Kulkarni Fix For: 1.2.1
Parameter values for authorization API call for getContentSummary have changed with fix for [HDFS-12130|https://issues.apache.org/jira/browse/HDFS-12130]. This causes Ranger authorizer to fail. Ranger authorizer needs to be updated to accommodate for NameNode changes in authorizing getContentSummary() use-case. Here are the details of the proposed updates: Ranger authorizer currently constructs the path to authorize from the given INodeAttributes Ranger authorizer will use the following alternate approach to construct the path - only when checkPermission() is called with single entry arrays for inodes and inodeAttributes parameters, and the given inode has a parent. – get path to authorize from the given inode by calling getFullPathName() – if snapshotId != Snapshot.CURRENT_STATE_ID, remove "/.snapshot" from the path obtained from getFullPathName() -- This message was sent by Atlassian JIRA (v7.6.3#76005)