Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(Ranger): Use Apache Ranger for meta access controller #1402

Merged
merged 8 commits into from
Apr 3, 2023
Merged

feat(Ranger): Use Apache Ranger for meta access controller #1402

merged 8 commits into from
Apr 3, 2023

Conversation

WHBANG
Copy link
Contributor

@WHBANG WHBANG commented Mar 20, 2023 •
edited
Loading

What problem does this PR solve?

#1054

This patch implements meta access controller using Ranger for ACL.

  1. Re-implemented the access control logic of RPCs registered in meta_serivce.h, and adapt the old and new ACL.
  2. Some internal RPCs are registered in the _allowed_rpc_code_list.
  3. Realize periodic update of resource strategy from Ranger service.
  4. Changed some ut.

acelyc111
acelyc111 reviewed Mar 21, 2023
View reviewed changes
src/runtime/security/meta_access_controller.cpp Outdated Show resolved Hide resolved
src/runtime/security/meta_access_controller.cpp Outdated Show resolved Hide resolved
src/runtime/ranger/ranger_resource_policy_manager.cpp Show resolved Hide resolved
src/runtime/ranger/ranger_resource_policy_manager.cpp Show resolved Hide resolved
src/meta/server_state.cpp Outdated Show resolved Hide resolved
src/meta/meta_service.h Outdated Show resolved Hide resolved
src/meta/meta_service.h Outdated Show resolved Hide resolved
src/meta/meta_service.h Outdated Show resolved Hide resolved
@acelyc111 acelyc111 merged commit 87f169a into apache:master Apr 3, 2023
@empiredan empiredan mentioned this pull request Aug 21, 2023
Closed
GehaFearless pushed a commit to GehaFearless/incubator-pegasus that referenced this pull request Feb 28, 2024
@acelyc111
[SKV-627] feat(Ranger): Use Apache Ranger for meta access controller (a…
48c5a9c 
…pache#1402)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@foreverneverer foreverneverer foreverneverer approved these changes

@acelyc111 acelyc111 acelyc111 approved these changes

Assignees
No one assigned
Labels
build cpp
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@WHBANG @acelyc111 @foreverneverer