[jira] [Updated] (RANGER-1695) Optimize Ranger code for authorization of HDFS 'getContentSummary' and 'delete' commands

["Abhay Kulkarni (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/RANGER-1695?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Abhay Kulkarni updated RANGER-1695:
-----------------------------------
    Summary: Optimize Ranger code for authorization of HDFS 'getContentSummary' and 'delete' commands  (was: Optimize Ranger code for authorization of HDFS commands getContentSummary and delete)

> Optimize Ranger code for authorization of HDFS 'getContentSummary' and 'delete' commands
> ----------------------------------------------------------------------------------------
>
>                 Key: RANGER-1695
>                 URL: https://issues.apache.org/jira/browse/RANGER-1695
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 0.7.1
>            Reporter: Abhay Kulkarni
>            Assignee: Abhay Kulkarni
>             Fix For: master
>
>
> HDFS commands such as getContentSummary and delete require Ranger to authorize access to entire directory hierarchy rooted at the directory passed in as argument. Ranger could optimize this code by pruning the directory tree whenever a sub-directory, and directory hierarchy rooted in it, is authorized for requested access. This could potentially save many spurious authorization API calls with Ranger policy engine.
> Also, it will be useful to gather and log performance metrics for the Ranger authorization API call for every Ranger plugin.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)