[jira] [Updated] (RANGER-1208) Optimize tag enricher for requests containing empty resource

["Velmurugan Periasamy (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/RANGER-1208?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Velmurugan Periasamy updated RANGER-1208:
-----------------------------------------
    Fix Version/s: 0.7.0

> Optimize tag enricher for requests containing empty resource
> ------------------------------------------------------------
>
>                 Key: RANGER-1208
>                 URL: https://issues.apache.org/jira/browse/RANGER-1208
>             Project: Ranger
>          Issue Type: Improvement
>          Components: plugins
>    Affects Versions: 0.6.0, 0.6.1
>            Reporter: Madhan Neethiraj
>            Assignee: Abhay Kulkarni
>             Fix For: 0.7.0
>
>
> A notion of empty resource is used by plugins like Hive to check if user has the given access to any resource. A special case of this usage is the 'show databases' command in Hive, which checks if the requesting user has 'any' access to any resource in the system. In this case, the tag enricher should attempt to find if the user has been granted access via a tag associated with any resource in the service i.e. any database/table/column. The algorithm to find the tags that match for the given resource can be optimized to handle this special case by simply retuning all the tags associated with all resources in the service - eliminating the need to attempt resource matching.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)