impala icon indicating copy to clipboard operation
impala copied to clipboard
verified publisher icon apache

[IMPALA-12291] - impala checks hdfs ranger policy

Open HalimKim opened this issue 2 years ago • 2 comments

Related Issue

  • https://issues.apache.org/jira/projects/IMPALA/issues/IMPALA-12291

Description

  • When HDFS is ranger enabled, current impala fe doesn't check ranger policy but hadoop inode permission
  • New feature adds getAvailableAccessLevel() method ranger check code using Hadoop API
  • Add one more catch in getTExecRequest() method to check AnalysisException

Test

  • Manual Test done
    • Distribute impala fe jar for impalad and catalogd
    • Enable HDFS Ranger Plugin.
    • Give impala Allow condition for ranger hdfs policy and check insert query - Insert Success
    • Give impala Deny condition for ranger hdfs policy and check insert query - Insert Fail

HalimKim avatar Jul 18 '23 11:07 HalimKim

Hi @HalimKim, thanks for your contribution! We don't use pull requests in Apache Impala, we use Gerrit instead: https://gerrit.cloudera.org/. https://cwiki.apache.org/confluence/display/IMPALA/Using+Gerrit+to+submit+and+review+patches has a walkthrough for uploading patches for review.

Thanks, Michael.

MikaelSmith avatar Jul 18 '23 16:07 MikaelSmith

@MikaelSmith Thanks, I just have uploaded the patch on gerrit. Walkthrough was really helpful.

HalimKim avatar Jul 19 '23 00:07 HalimKim