You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Ramesh Mani (Jira)" <ji...@apache.org> on 2021/11/08 22:04:00 UTC

[jira] [Created] (RANGER-3507) Handle trailing slash in the ranger Hive URL policy authorization

Ramesh Mani created RANGER-3507:
-----------------------------------

             Summary: Handle trailing slash in the ranger Hive URL policy authorization
                 Key: RANGER-3507
                 URL: https://issues.apache.org/jira/browse/RANGER-3507
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
    Affects Versions: 2.0.0, 3.0.0
            Reporter: Ramesh Mani
             Fix For: 3.0.0


Currently when there is a trailing slash in the ranger URL policy in Hive, it doesn't authorizer the URL request. The trailing slash has to be remove to have the authorization done correctly.

e.g. 

1) URL policy is maintained for "hdfs://node1.site/test/data/" with or without recursive on.

2) Authorization request from Hive always comes without the trailing slash ( hdfs://node1.site/test/data) and this result in authorization failure. 

Url policy with or without trailing slash has to behave the same way.  As per POSIX perspective "hdfs://node1.site/test/data/" and "hdfs://node1.site/test/data" are same and the policy has to authorize the request correctly.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)