You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "Ramesh Mani (Jira)" <ji...@apache.org> on 2022/04/16 05:44:00 UTC

[jira] [Updated] (RANGER-3507) Handle trailing slash in the ranger Hive URL policy authorization

     [ https://issues.apache.org/jira/browse/RANGER-3507?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ramesh Mani updated RANGER-3507:
--------------------------------
    Fix Version/s: 2.3.0

> Handle trailing slash in the ranger Hive URL policy authorization
> -----------------------------------------------------------------
>
>                 Key: RANGER-3507
>                 URL: https://issues.apache.org/jira/browse/RANGER-3507
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 2.0.0, 3.0.0
>            Reporter: Ramesh Mani
>            Assignee: Ramesh Mani
>            Priority: Major
>             Fix For: 3.0.0, 2.3.0
>
>
> Currently when there is a trailing slash in the ranger URL policy in Hive, it doesn't authorizer the URL request. The trailing slash has to be remove to have the authorization done correctly.
> e.g. 
> 1) URL policy is maintained for "hdfs://node1.site/test/data/" with or without recursive on.
> 2) Authorization request from Hive always comes without the trailing slash ( hdfs://node1.site/test/data) and this result in authorization failure. 
> Url policy with or without trailing slash has to behave the same way.  As per POSIX perspective "hdfs://node1.site/test/data/" and "hdfs://node1.site/test/data" are same and the policy has to authorize the request correctly.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)