Skip to content

Commit c5f5b94

Browse files
committed
RANGER-5501: fix missing accessType in audit logs generated by RangerEmbeddedAuthorizer
1 parent 852db75 commit c5f5b94

1 file changed

Lines changed: 7 additions & 3 deletions

File tree

authz-embedded/src/main/java/org/apache/ranger/authz/embedded/RangerAuthzPlugin.java

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -96,7 +96,7 @@ public RangerAuthzResult authorize(RangerAuthzRequest request, RangerAuthzAuditH
9696
RangerAccessResource resource = getResource(access.getResource().getName(), access.getResource().getAttributes());
9797
RangerAccessRequestImpl accessRequest = new RangerAccessRequestImpl(resource, null, userInfo.getName(), userInfo.getGroups(), userInfo.getRoles());
9898

99-
initializeRequest(accessRequest, context);
99+
initializeRequest(accessRequest, access, context);
100100

101101
boolean hasDeny = false;
102102
boolean hasAllow = false;
@@ -160,7 +160,7 @@ public RangerResourcePermissions getResourcePermissions(RangerResourceInfo resou
160160

161161
ret.setResource(resource);
162162
request.setResource(getResource(resource.getName(), null));
163-
initializeRequest(request, context);
163+
initializeRequest(request, null, context);
164164

165165
RangerResourceACLs acls = plugin.getResourceACLs(request);
166166

@@ -234,7 +234,11 @@ private RangerAccessResource getSubResource(RangerAccessResource parent, String
234234
return new RangerAccessResourceImpl(elements, parent.getOwnerUser());
235235
}
236236

237-
private void initializeRequest(RangerAccessRequestImpl request, RangerAccessContext context) {
237+
private void initializeRequest(RangerAccessRequestImpl request, RangerAccessInfo access, RangerAccessContext context) {
238+
if (access != null) {
239+
request.setAction(access.getAction());
240+
}
241+
238242
request.setAccessTime(new Date(context.getAccessTime()));
239243
request.setClientIPAddress(context.getClientIpAddress());
240244
request.setForwardedAddresses(context.getForwardedIpAddresses());

0 commit comments

Comments
 (0)