You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Sailaja Polavarapu (Jira)" <ji...@apache.org> on 2022/03/09 01:04:00 UTC

[jira] [Created] (RANGER-3657) Support for recursive ACL check for subpaths in Ozone plugin

Sailaja Polavarapu created RANGER-3657:
------------------------------------------

             Summary: Support for recursive ACL check for subpaths in Ozone plugin
                 Key: RANGER-3657
                 URL: https://issues.apache.org/jira/browse/RANGER-3657
             Project: Ranger
          Issue Type: Improvement
          Components: Ranger
            Reporter: Sailaja Polavarapu


This task is to implement {{recursive}} ACL check in {{{}RangerOzoneAuthorizer{}}}, using the below interface. OzoneRanger can build an optimized recursive ACL check similar to HDFS - [Reference|https://github.com/apache/ranger/blob/master/hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java#L444]

 
{code:java}
IAccessAuthorizer#checkAccess(IOzoneObj ozoneObject, RequestContext context)

public class RequestContext {
     …...
     /**
      * Represents recursive access check required for all the sub-paths of the
      * given path. If the given path is not a directory, there is no effect for
      * this flag. A true value represents recursive check, false represents
      * non-recursive check.
      */
      private final boolean recursiveAccessCheck; // introducing new attribute for recursive access checks.
}{code}



--
This message was sent by Atlassian Jira
(v8.20.1#820001)