ranger
ranger copied to clipboard
RANGER-3298. Add coarse option for Hive URI permission check
In RangerHiveAuthorizer, the function of checkPrivileges will check the permission for the HivePrivilegeObject with FileUtils.isActionPermittedForFileHierarchy, and this method will check the permission for all the files under the related directory by default.
For a large table with thousands of files, this operation will take a long time, leading to breaking the SLA. Besides, in the default implementation of StorageBasedAuthorizationProvider in Hive, only the directories will be checked too.
This ticket is to add a config for users to do a coarse check for URI permission check.
@rameeshm Could you have a look at this PR?
@symious Could you please create a review request in https://reviews.apache.org/ against ranger project we shall review this and merge.
@rameeshm Review request created. Please have a look. https://reviews.apache.org/r/73727/