[ 
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15378792#comment-15378792
 ] 

Lili Ma edited comment on HAWQ-256 at 7/15/16 3:16 AM:
-------------------------------------------------------

[~bosco] Thanks. Things are getting more clear now.

So for the interaction between HAWQ and Ranger, I think there are mainly two 
parts:

1. Set policy.  When HAWQ users invoke GRANT SQL in HAWQ, need pass that 
command to Ranger to set the policy.
2.Check Authorization.  When HAWQ user want to operate on some objects, need 
contact Ranger to check whether the user has the privilege. 

Both these two parts of interaction rely on Ranger Plugin. 

What we need do next is detailing down the interface for interaction and 
designing the HAWQ own side implementation.  

Please suggest if I missed something.  Thanks


was (Author: lilima):
[~bosco] Thanks. Things are getting more clear now.

So for the interaction between HAWQ and Ranger, I think there are mainly two 
parts:

1. Set policy.  When HAWQ users invoke GRANT SQL in HAWQ, need pass that 
command to Ranger to set the policy.

2.Check Authorization.  When HAWQ user want to operate on some objects, need 
contact Ranger to check whether the user has the privilege. 

Both these two parts of interaction rely on Ranger Plugin. 

What we need do next is detailing down the interface for interaction and 
designing the HAWQ own side implementation.  

Please suggest if I missed something.  Thanks

> Integrate Security with Apache Ranger
> -------------------------------------
>
>                 Key: HAWQ-256
>                 URL: https://issues.apache.org/jira/browse/HAWQ-256
>             Project: Apache HAWQ
>          Issue Type: New Feature
>          Components: PXF, Security
>            Reporter: Michael Andre Pearce (IG)
>            Assignee: Lili Ma
>             Fix For: backlog
>
>
> Integrate security with Apache Ranger for a unified Hadoop security solution. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to