The UGI cache should return correct ugi for each entity
Description
Release Notes
Fixed a bug that ugi provider returns the old and incorrect ugi information.
Activity
Show:
Yaojie Feng June 30, 2017 at 6:30 PMEdited
Fixed
Pinned fields
Click on the next to a field label to start pinning.
Created June 23, 2017 at 11:38 PM
Updated July 13, 2017 at 6:38 PM
Resolved July 8, 2017 at 12:39 AM
We are using ImpersonationRequest as the cache key for the impersonation cache. But since we do not know the principal when we make the request, when two different principals try to get the ugi in the cache timeout, the ugi we return will always be for the first principal.
To reproduce,
create a namespace as cdap,
delete the namespace,
create a namespace impersonated as alice, (alice does not have permission on hdfs),
creation will succeed since on hdfs we are impersonating as cdap