[ https://issues.apache.org/jira/browse/SUBMARINE-320?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
cdmikechen updated SUBMARINE-320: --------------------------------- Target Version: 0.6.1 (was: 0.8.0) > Integrate apache ranger in submarine metastore module > ----------------------------------------------------- > > Key: SUBMARINE-320 > URL: https://issues.apache.org/jira/browse/SUBMARINE-320 > Project: Apache Submarine > Issue Type: Sub-task > Components: Commons > Reporter: Liu Xun > Assignee: qiwei huang > Priority: Major > > The submarine commons metastore module now provides meta services through the > REST interface through the metastore integrated with Hive. > Now you need to integrate the apache ranger in the submarine commons > metastore module. When the user accesses the REST interface, check whether > the user has access to the meta. > For example, when a user executes show database / table, only the database / > table to which the user has permissions can be returned. > Apache ranger is divided into three parts: ranger-server, ranger-mysql and > ranger-plugin. > 1. ranger-server.jar provides the function of setting permissions. We can > save the user's permissions to the ranger-mysql database through > ranger-server.jar. > 2. ranger-mysql uses the ranger table structure. > 3. The ranger-plugin obtains permissions through the interface of the > ranger-server. > 4. ranger-plugin.jar is integrated in the submarine commons metastore module. > When users access metadata through the submarine commons metastore interface, > they must first pass the ranger-plugin.jar check or filter permissions. > 5. We should need ranger-server and ranger-hive-plugin, the ranger mysql > database. These 3 parts. > {color:red}Please note that we only integrate the jar package of ranger, not > start the service process of ranger.{color} -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@submarine.apache.org For additional commands, e-mail: dev-h...@submarine.apache.org