Intermittent HDFS authorization failures caused by unsafe lazy initialization in CaseSensitiveRecursiveMatcher

Reviews
Diff

- Download Diff

Information
Submitter:	Xuze Yang
Repository:	ranger
Branch:	master
Bugs:	RANGER-5403
Depends On:
Reviewers
Groups:
People:	anandNadar, ankita.sinha, kirbyzhou, madhan.neethiraj, monika-kachhadiya, prashant, subhrat

Description

HDFS plugin may intermittently return incorrect authorization results when evaluating path-based policies.

This issue occurs under concurrent access due to unsafe lazy initialization inside RangerPathResourceMatcher$CaseSensitiveRecursiveMatcher.

more information in https://issues.apache.org/jira/browse/RANGER-5403

Testing Done

Files

Issues

0
2
0
All Issues: 2

Description	From	Last Updated
valueWithoutSeparator and valueWithSeparator can be marked as final with updates in this patch.	Madhan Neethiraj	Nov. 19, 2025, 1:19 a.m.
valueWithoutSeparator and valueWithSeparator can be marked as final with updates in this patch.	Madhan Neethiraj	Nov. 19, 2025, 1:19 a.m.

Ship it!

Xuze Yang - thank you for the fix. Can you please review couple of suggestions and update the patch?

Xuze Yang Nov. 19, 2025, 1:20 a.m.

Thank you for your review. I've incorporated your suggested changes in the updated patch. Please let me know if there are any additional feedback or if further adjustments are needed.

agents-common/src/main/java/org/apache/ranger/plugin/resourcematcher/RangerPathResourceMatcher.java (Diff revision 1)

Show all issues

valueWithoutSeparator and valueWithSeparator can be marked as final with updates in this patch.

agents-common/src/main/java/org/apache/ranger/plugin/resourcematcher/RangerURLResourceMatcher.java (Diff revision 1)

Show all issues

valueWithoutSeparator and valueWithSeparator can be marked as final with updates in this patch.

Change Summary:

mark valueWithoutSeparator and valueWithSeparator as final

Added Files:

Change Summary:

mark valueWithoutSeparator and valueWithSeparator as final

Diff:

Revision 2 (+20 -25)

Show changes

	agents-common/src/main/java/org/apache/ranger/plugin/resourcematcher/RangerPathResourceMatcher.java
	agents-common/src/main/java/org/apache/ranger/plugin/resourcematcher/RangerURLResourceMatcher.java

Ship it!

Ship It!

You have a pending review.

Review Board 2.5.9

JavaScript is turned off

Screenshots

Files

Issues

Change Summary:

Added Files:

Change Summary:

Diff:

Status: Closed (submitted)