You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Madhan Neethiraj (Jira)" <ji...@apache.org> on 2022/12/08 23:01:00 UTC

[jira] [Updated] (RANGER-4008) RangerTagEnricher to ignore invalid resources

     [ https://issues.apache.org/jira/browse/RANGER-4008?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Madhan Neethiraj updated RANGER-4008:
-------------------------------------
    Attachment: RANGER-4008.patch

> RangerTagEnricher to ignore invalid resources
> ---------------------------------------------
>
>                 Key: RANGER-4008
>                 URL: https://issues.apache.org/jira/browse/RANGER-4008
>             Project: Ranger
>          Issue Type: Bug
>          Components: plugins
>            Reporter: Madhan Neethiraj
>            Assignee: Madhan Neethiraj
>            Priority: Major
>             Fix For: 3.0.0, 2.4.0
>
>         Attachments: RANGER-4008.patch
>
>
> When tags downloaded by plugins includes a resource with invalid resource hierarchy (like: hiveservice/database/table/column), the plugin ignores the entire tags downloaded and continues to enforce current tags (if any), with the following error:
> {{}}
> {code:java}
> 2022-12-01T10:33:33.913Z ERROR RangerTagRefresher(serviceName=dev_hive)-16193 org.apache.ranger.plugin.contextenricher.RangerTagEnricher Could not create service-resource-matcher for service-resource:[RangerServiceResource={ id={8} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} guid={null} serviceName={null} resourceElements={hiveservice={RangerPolicyResource={values={dev_hive } isExcludes={false} isRecursive={false} }} column={RangerPolicyResource={values={region } isExcludes={false} isRecursive={false} }} database={RangerPolicyResource={values={db1 } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={tbl1 } isExcludes={false} isRecursive={false} }} } ownerUser={null} additionalInfo={} resourceSignature={xxx} }]  {code}
>  
> Instead of ignoring entire downloaded tags, the plugin should only ignore incorrect resources.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)