apache / apache/kyuubi

[Bug] ranger policycache cannot be updated automatically

Open
#6,595 2 comments 0 reactions 0 assignees View on GitHub
kind:bug priority:major
Dominant language
Scala
Stars
2.4k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

### Search before asking

- [X] I have searched in the [issues](https://github.com/apache/kyuubi/issues?q=is%3Aissue) and found no similar issues.

### Describe the bug

kyuubi upgraded from 1.8.0 to 1.9.2 ranger to add table permissions and cannot update the cahce file, as shown below. As a result, the permissions of new rules cannot be controlled.

![image](https://github.com/user-attachments/assets/c8588923-b5e1-4c36-bbd1-6642bfa0e45b)

### Affects Version(s)

1.9.2

### Kyuubi Server Log Output

```logtalk
no
```

### Kyuubi Engine Log Output

```logtalk
no
```

### Kyuubi Server Configurations

```yaml
no
```

### Kyuubi Engine Configurations

```yaml
no
```

### Additional context

no

### Are you willing to submit PR?

- [ ] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to fix.
- [X] No. I cannot submit a PR at this time.

Contributor guide

Open the contributing guide

Research direction

The report names no source file, test, log, or configuration entry point, so begin by locating Kyuubi's Ranger policy-cache handling for version 1.9.2. Done should mean the cache updates automatically after new Ranger table-permission rules are added and those rules control access as expected.

Written by the indexing model from the issue text.

Assessment

Tech stack
scala
Domain
authorization
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.