[jira] [Created] (RANGER-4007) HDFS Authorizer changes to take advantage of support for multiple access-types in the Ranger Access Request

["Abhay Kulkarni (Jira)" <ji...@apache.org>]

Abhay Kulkarni created RANGER-4007:
--------------------------------------

             Summary: HDFS Authorizer changes to take advantage of support for multiple access-types in the Ranger Access Request
                 Key: RANGER-4007
                 URL: https://issues.apache.org/jira/browse/RANGER-4007
             Project: Ranger
          Issue Type: Improvement
          Components: Ranger
            Reporter: Abhay Kulkarni
            Assignee: Abhay Kulkarni


Ranger authorizer plugin for HDFS, when asked to authorize certain accesses, requires to check if the user is authorized to do more than one permission for the requested resource. Currently, this is achieved by the plugin making separate call into Ranger policy engine to check authorization for each such permission. This works, but is inefficient.

A recent improvement in Ranger policy engine (RANGER-3999) adds support for specifying  multiple permissions that need to be authorized for a resource in one Policy engine call. This  Jira updates the Ranger plugin for HDFS to use this feature, thereby improving performance of access authorization for certain access requests.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)