Fredy Wijaya has posted comments on this change. ( 
http://gerrit.cloudera.org:8080/13601 )

Change subject: IMPALA-8658: Populate missing Ranger audit fields
......................................................................


Patch Set 3:

(2 comments)

http://gerrit.cloudera.org:8080/#/c/13601/2/fe/src/main/java/org/apache/impala/authorization/ranger/RangerBufferAuditHandler.java
File 
fe/src/main/java/org/apache/impala/authorization/ranger/RangerBufferAuditHandler.java:

http://gerrit.cloudera.org:8080/#/c/13601/2/fe/src/main/java/org/apache/impala/authorization/ranger/RangerBufferAuditHandler.java@117
PS2, Line 117:     String resourceType = resource != null ? 
resource.getLeafName() : null;
> this seems like the impala IP, not the client's IP. I'm not sure exactly wh
Ah Impala client IP. I thought it was Ranger client IP, which is an Impala IP 
:) Done.


http://gerrit.cloudera.org:8080/#/c/13601/2/fe/src/test/resources/ranger-hive-audit.xml
File fe/src/test/resources/ranger-hive-audit.xml:

http://gerrit.cloudera.org:8080/#/c/13601/2/fe/src/test/resources/ranger-hive-audit.xml@27
PS2, Line 27:     <name>ranger.plugin.hive.ambari.cluster.name</name>
> if this parameter isn't set by the end user, do we risk an uninterpretable
I don't think this field is strictly required by the Ranger audit. It seems to 
work fine without it. It is okay to pass null when cluster name isn't available.



--
To view, visit http://gerrit.cloudera.org:8080/13601
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I167bc35411ad9b4164c292077ff082671967cff8
Gerrit-Change-Number: 13601
Gerrit-PatchSet: 3
Gerrit-Owner: Fredy Wijaya <fwij...@cloudera.com>
Gerrit-Reviewer: Fredy Wijaya <fwij...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
Gerrit-Reviewer: Todd Lipcon <t...@apache.org>
Gerrit-Comment-Date: Thu, 13 Jun 2019 19:56:45 +0000
Gerrit-HasComments: Yes

Reply via email to