You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by ru jia <82...@163.com> on 2020/10/12 12:24:02 UTC

Review Request 72951: RANGER-3035:Ranger Presto Plugin: Machine-Machine user can not access presto with right permission

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/72951/
-----------------------------------------------------------

Review request for ranger.


Bugs: RANGER-3035
    https://issues.apache.org/jira/browse/RANGER-3035


Repository: ranger


Description
-------

plugin-presto use the user who comes from identity object to create request now , it will not match when the user is M-M user(like: user1/host@TEST.COM). It is more reasonable to use short name of users.


Diffs
-----

  plugin-presto/src/main/java/org/apache/ranger/authorization/presto/authorizer/RangerSystemAccessControl.java f4fc89dc1 


Diff: https://reviews.apache.org/r/72951/diff/1/


Testing
-------

already used in production environment.
1. kerberos environment
2. kinit -kt {keytab-file} {M-M user}
3. go into presto shell and execute related commad


Thanks,

ru jia