Hao Hao has uploaded this change for review. ( http://gerrit.cloudera.org:8080/15711
Change subject: [ranger] Fix and refactor RangerClient ...................................................................... [ranger] Fix and refactor RangerClient While working on integration tests we found a discrepancy handling column-level privileges between Ranger and Sentry. This was caused by RangerClient returning NotAuthorized when the requested action couldn't be authorized on any of the resources. This commit moves all authorization logic to the authorization provider instead of the client. Change-Id: I3fb7272601c9cb7ebe2e250bea728e76894d242a Reviewed-on: http://gerrit.cloudera.org:8080/15696 Reviewed-by: Alexey Serbin <aser...@cloudera.com> Tested-by: Attila Bukor <abu...@apache.org> Reviewed-by: Andrew Wong <aw...@cloudera.com> (cherry picked from commit e7044a5cbe1d1f9d36204279c73901d37451a570) --- M src/kudu/master/ranger_authz_provider.cc M src/kudu/ranger/ranger_client-test.cc M src/kudu/ranger/ranger_client.cc M src/kudu/ranger/ranger_client.h 4 files changed, 219 insertions(+), 166 deletions(-) git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/11/15711/1 -- To view, visit http://gerrit.cloudera.org:8080/15711 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: branch-1.12.x Gerrit-MessageType: newchange Gerrit-Change-Id: I3fb7272601c9cb7ebe2e250bea728e76894d242a Gerrit-Change-Number: 15711 Gerrit-PatchSet: 1 Gerrit-Owner: Hao Hao <hao....@cloudera.com> Gerrit-Reviewer: Attila Bukor <abu...@apache.org>
