[jira] [Updated] (SUBMARINE-320) Integrate apache ranger in submarine metastore module

["Wei-Chiu Chuang (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SUBMARINE-320?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Wei-Chiu Chuang updated SUBMARINE-320:
--------------------------------------
    Target Version: 0.7.0  (was: 0.6.0)

> Integrate apache ranger in submarine metastore module
> -----------------------------------------------------
>
>                 Key: SUBMARINE-320
>                 URL: https://issues.apache.org/jira/browse/SUBMARINE-320
>             Project: Apache Submarine
>          Issue Type: Sub-task
>          Components: Commons
>            Reporter: Liu Xun
>            Assignee: qiwei huang
>            Priority: Major
>
> The submarine commons metastore module now provides meta services through the REST interface through the metastore integrated with Hive.
> Now you need to integrate the apache ranger in the submarine commons metastore module. When the user accesses the REST interface, check whether the user has access to the meta.
> For example, when a user executes show database / table, only the database / table to which the user has permissions can be returned.
> Apache ranger is divided into three parts: ranger-server, ranger-mysql and ranger-plugin.
> 1. ranger-server.jar provides the function of setting permissions. We can save the user's permissions to the ranger-mysql database through ranger-server.jar.
> 2. ranger-mysql uses the ranger table structure.
> 3. The ranger-plugin obtains permissions through the interface of the ranger-server.
> 4. ranger-plugin.jar is integrated in the submarine commons metastore module. When users access metadata through the submarine commons metastore interface, they must first pass the ranger-plugin.jar check or filter permissions.
> 5. We should need ranger-server and ranger-hive-plugin, the ranger mysql database. These 3 parts.
> {color:red}Please note that we only integrate the jar package of ranger, not start the service process of ranger.{color}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@submarine.apache.org
For additional commands, e-mail: dev-help@submarine.apache.org