You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@kylin.apache.org by "peng.jianhua (JIRA)" <ji...@apache.org> on 2017/12/05 08:44:00 UTC

[jira] [Comment Edited] (KYLIN-3074) Change cube access to project access in ExternalAclProvider.java

    [ https://issues.apache.org/jira/browse/KYLIN-3074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16278205#comment-16278205 ] 

peng.jianhua edited comment on KYLIN-3074 at 12/5/17 8:43 AM:
--------------------------------------------------------------

Hi [~Shaofengshi], could you also merged the patch to a released branch? Such as v2.2.0. Only the issue was merged into a released branch, the ranger can be compiled successfully when I merged the https://issues.apache.org/jira/browse/RANGER-1672. Thanks very much!


was (Author: peng.jianhua):
Hi [~Shaofengshi], could you merged the patch to a released branch? Such as v2.2.0. Only the issue was merged into a released branch, the ranger can be compiled successfully when I merged the https://issues.apache.org/jira/browse/RANGER-1672. Thanks very much!

> Change cube access to project access in ExternalAclProvider.java
> ----------------------------------------------------------------
>
>                 Key: KYLIN-3074
>                 URL: https://issues.apache.org/jira/browse/KYLIN-3074
>             Project: Kylin
>          Issue Type: Bug
>    Affects Versions: v2.2.0
>            Reporter: peng.jianhua
>            Assignee: peng.jianhua
>             Fix For: v2.3.0
>
>         Attachments: 0001-KYLIN-3074-branch-2.2.x.patch, 0001-KYLIN-3074-master.patch
>
>
> According to ranger recommendations, the following aspects were modified:
> 1.Cube ACL is removed since v2.2.0, we shuold modify the aclPermission name, no longer cube access.
> 2.Remove unnecessary requests. For example, get cube and model access entities, it will be recorded in the ranger audit log.
> 3.Remove unnecessary permission verification. Kylin currently used four permissions(ADMINISTRATION,MANAGEMENT,OPERATION,READ), other permissions do not need to be verified. Every time permission verification will be recorded in the ranger audit log.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)