You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@kylin.apache.org by "Shaofeng SHI (JIRA)" <ji...@apache.org> on 2017/12/05 08:27:00 UTC

[jira] [Resolved] (KYLIN-3074) Change cube access to project access in ExternalAclProvider.java

     [ https://issues.apache.org/jira/browse/KYLIN-3074?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Shaofeng SHI resolved KYLIN-3074.
---------------------------------
    Resolution: Fixed

Patch merged in master. Thanks jianhua!

> Change cube access to project access in ExternalAclProvider.java
> ----------------------------------------------------------------
>
>                 Key: KYLIN-3074
>                 URL: https://issues.apache.org/jira/browse/KYLIN-3074
>             Project: Kylin
>          Issue Type: Bug
>    Affects Versions: v2.2.0
>            Reporter: peng.jianhua
>            Assignee: peng.jianhua
>             Fix For: v2.3.0
>
>         Attachments: 0001-KYLIN-3074-branch-2.2.x.patch, 0001-KYLIN-3074-master.patch
>
>
> According to ranger recommendations, the following aspects were modified:
> 1.Cube ACL is removed since v2.2.0, we shuold modify the aclPermission name, no longer cube access.
> 2.Remove unnecessary requests. For example, get cube and model access entities, it will be recorded in the ranger audit log.
> 3.Remove unnecessary permission verification. Kylin currently used four permissions(ADMINISTRATION,MANAGEMENT,OPERATION,READ), other permissions do not need to be verified. Every time permission verification will be recorded in the ranger audit log.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)