Skip to content

[KYUUBI #2470][AUTHZ] Add Ranger performance tracing to rule authorization#7555

Open
hutiefang76 wants to merge 1 commit into
apache:masterfrom
hutiefang76:codex/kyuubi-2470-ranger-perf-tracer
Open

[KYUUBI #2470][AUTHZ] Add Ranger performance tracing to rule authorization#7555
hutiefang76 wants to merge 1 commit into
apache:masterfrom
hutiefang76:codex/kyuubi-2470-ranger-perf-tracer

Conversation

@hutiefang76

Copy link
Copy Markdown

Why are the changes needed?

Closes #2470.

RuleAuthorization.checkPrivileges currently has no Ranger performance trace around privilege-request construction and evaluation. This adds the established sparkauth.request tracer around the complete authorization path and logs it from finally, so both successful checks and exceptions finish the timing record without changing authorization results.

How was this patch tested?

  • JAVA_HOME=$(/usr/libexec/java_home -v 17) ./dev/reformat
  • JAVA_HOME=$(/usr/libexec/java_home -v 17) ./build/mvn -pl extensions/spark/kyuubi-spark-authz -am -DwildcardSuites=org.apache.kyuubi.plugin.spark.authz.ranger.InMemoryCatalogRangerSparkExtensionSuite -DskipITs test
    • 16 tests passed, including a new assertion that captures the performance trace on both successful and denied authorization paths.
  • git diff --check

Was this patch authored or co-authored using generative AI tooling?

Assisted-by: OpenAI Codex with GPT-5

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Improvement] Add RangerPerfTracer for RuleAuthorization checkPrivileges

1 participant