You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Madhan Neethiraj (Jira)" <ji...@apache.org> on 2026/04/09 20:39:00 UTC
[jira] [Created] (RANGER-5550) introduce authz-remote library to support thin client integration for plugins
Madhan Neethiraj created RANGER-5550:
----------------------------------------
Summary: introduce authz-remote library to support thin client integration for plugins
Key: RANGER-5550
URL: https://issues.apache.org/jira/browse/RANGER-5550
Project: Ranger
Issue Type: New Feature
Components: authz-api, pdp
Reporter: Madhan Neethiraj
Ranger plugins use {{authz-embedded}} or {{ranger-plugins-common}} library to evaluate Ranger policies to authorize access requests. These libraries run the policy engine in-process, making the policy evaluation very responsive. However, they do bring in a long list of dependent libraries including jackson, jetty, httpcomponents, solrj, zookeeper, hadoop-client, dropwizard, graalvm, and more.
For plugins where a minimal library dependency is preferred, Ranger should offer integration approach where policy evaluation is performed out-of-process, in {{ranger-pdp}} server introduced in RANGER-5263. This Jira tracks new Ranger library, {{authz-remote}} that provides implementation of RangerAuthorizer interface that calls {{ranger-pdp}} REST APIs to evaluate policies. It is critical for this module to keeps it dependency list to as minimal as possible.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)