Bowen Liang 23a8ccd538 [KYUUBI #3371] [FEATURE] [AUTHZ] Support checking access privileges in single call and throws all disallowed in exception ... ### _Why are the changes needed?_ to close #3371 Adding an ranger plugin config for enabling full access privileges, Authz checks all access privileges and throw exception with message of unsatisfied privileges on different resources in natural order in execution plan. ### _How was this patch tested?_ - [x] Add some test cases that check the changes thoroughly including negative and positive cases if possible - [ ] Add screenshots for manual tests if appropriate - [x] [Run test](https://kyuubi.apache.org/docs/latest/develop_tools/testing.html#running-tests) locally before make a pull request Closes #3380 from bowenliang123/3371-authz-full-check. Closes #3371 9326196d [Bowen Liang] add RangerConfigProvider for getting plugin config of different Ranger versions. add invokeStatic in AuthZUtils. 65d765dd [Bowen Liang] use ArrayBuffer for value of accessTypeToResource map. import scala LinkedHashMap. 959cd7dc [liangbowen] nit: update ut dbfd3479 [liangbowen] 1.use LinkedHashMap and LinkedHashSet for keeping in natual order for consistent error msg output, 2. update ut 3e0a5feb [liangbowen] revert to not enforcing output error message in alphabet order 1df4130d [Bowen Liang] add ut with multiple input tables and one output table 5241fd6a [Bowen Liang] refactor verify method in more scala style d7bc6841 [Bowen Liang] nit 32b2dd6d [Bowen Liang] nit: docs d9787be4 [Bowen Liang] nit: docs 87b095cf [Bowen Liang] simplify verify method a0d27e0c [Bowen Liang] simplify verify method and update docs c9b4e065 [Bowen Liang] rename config to ranger.plugin.plugin.authorize.in.single.call, simplify access checking, and related docs f6ccc1ac [liangbowen] move verify to SparkRangerAdminPlugin and change config name to ranger.plugin.spark.enable.full.access.violation.msg c531cadb [Bowen Liang] add config doc in Authz 041c49b1 [Bowen Liang] move config to ranger plugin conf f4fbeb23 [liangbowen] support for full access checking Lead-authored-by: Bowen Liang <liangbowen@gf.com.cn> Co-authored-by: liangbowen <liangbowen@gf.com.cn> Signed-off-by: Kent Yao <yao@apache.org>		2022-09-02 17:17:56 +08:00
..
spark	[KYUUBI #3371] [FEATURE] [AUTHZ] Support checking access privileges in single call and throws all disallowed in exception	2022-09-02 17:17:56 +08:00
index.rst	[KYUUBI #2751] [DOC] Replace sphinx_rtd_theme with sphinx_book_theme	2022-05-27 02:22:36 +08:00