Hao Hao has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/15711 )
Change subject: [ranger] Fix and refactor RangerClient ...................................................................... [ranger] Fix and refactor RangerClient While working on integration tests we found a discrepancy handling column-level privileges between Ranger and Sentry. This was caused by RangerClient returning NotAuthorized when the requested action couldn't be authorized on any of the resources. This commit moves all authorization logic to the authorization provider instead of the client. Change-Id: I3fb7272601c9cb7ebe2e250bea728e76894d242a Reviewed-on: http://gerrit.cloudera.org:8080/15696 Reviewed-by: Alexey Serbin <aser...@cloudera.com> Tested-by: Attila Bukor <abu...@apache.org> Reviewed-by: Andrew Wong <aw...@cloudera.com> (cherry picked from commit e7044a5cbe1d1f9d36204279c73901d37451a570) Reviewed-on: http://gerrit.cloudera.org:8080/15711 Tested-by: Kudu Jenkins Reviewed-by: Hao Hao <hao....@cloudera.com> --- M src/kudu/master/ranger_authz_provider.cc M src/kudu/ranger/ranger_client-test.cc M src/kudu/ranger/ranger_client.cc M src/kudu/ranger/ranger_client.h 4 files changed, 219 insertions(+), 166 deletions(-) Approvals: Kudu Jenkins: Verified Hao Hao: Looks good to me, approved -- To view, visit http://gerrit.cloudera.org:8080/15711 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: branch-1.12.x Gerrit-MessageType: merged Gerrit-Change-Id: I3fb7272601c9cb7ebe2e250bea728e76894d242a Gerrit-Change-Number: 15711 Gerrit-PatchSet: 3 Gerrit-Owner: Hao Hao <hao....@cloudera.com> Gerrit-Reviewer: Alexey Serbin <aser...@cloudera.com> Gerrit-Reviewer: Andrew Wong <aw...@cloudera.com> Gerrit-Reviewer: Attila Bukor <abu...@apache.org> Gerrit-Reviewer: Hao Hao <hao....@cloudera.com> Gerrit-Reviewer: Kudu Jenkins (120)
