[DOCS] ranger-spark-audit-xml

[lordk911]

Code of Conduct

• I agree to follow this project's Code of Conduct

Search before asking

• I have searched in the issues and found no similar issues.

Which parts of the documentation do you think need improvement?

No response

Affects Version(s)

master

Improving the documentation

the example of ranger-spark-audit.xml in document:
https://kyuubi.readthedocs.io/en/latest/security/authorization/spark/install.html#ranger-spark-audit-xml

as ranger document says : Audit to DB will not be available from 0.6 version.
so config property about xasecure.audit.destination.db* maybe could remove from kyuubi's document

Anything else

No response

Are you willing to submit PR?

• Yes. I can submit a PR independently to improve.
• Yes. I would be willing to submit a PR with guidance from the Kyuubi community to improve.
• No. I cannot submit a PR at this time.

[pan3793]

Sounds reasonable, cc @bowenliang123

[bowenliang123]

Yes, it seems auditing to DB no longer supported.
Could you submit a PR to fix this by updating relevant configs to other audit destination source type referring to the config template of Ranger? https://github.com/apache/ranger/blob/release-ranger-2.3.0/security-admin/scripts/ranger-admin-site-template.xml#L155
@lordk911

[lordk911]

Actually, audit log is not necessary for authz and have no affect of authz behavior, but it's a part of security. If user quite familiar with ranger and care about audit he/she will check ranger document by one self.
We can just leave a annotation, authz's audit log ability is powered by ranger.
Diffrent version of ranger have diffrent audit destination.