{"id":91835,"date":"2019-05-15T16:00:04","date_gmt":"2019-05-15T13:00:04","guid":{"rendered":"http:\/\/www.javacodegeeks.com\/?p=91835"},"modified":"2019-05-14T12:09:45","modified_gmt":"2019-05-14T09:09:45","slug":"beautiful-simplicity-apache-ranger-plugin","status":"publish","type":"post","link":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html","title":{"rendered":"The beautiful simplicity of Apache Ranger plugin"},"content":{"rendered":"

If you are here, you already know what Apache Ranger<\/a> is. It is the most popular, if not the only, way to manage security in the Hadoop framework. It has integrations with Active Directory, Kerberos and various others for authentication but I believe the most interesting feature is its authorization support. Being part of the Hadoop ecosystem, one would not be surprised that it has inbuilt support (via plugins) for most frameworks in the Hadoop ecosystem – Hive, HBase, HDFS etc. However, I’ve found that it’s actually very easy to spin your own custom plugin for Ranger.<\/p>\n

This post would focus on the simplicity of design in Ranger plugins and showcase how easy it is to build one for ourselves. As an example, we’ll build a Ranger plugin for managing access to a simple HTTP service written using Akka HTTP.<\/p>\n

\n
\nNote : You are not required to know about Akka HTTP to follow this post. All you needed to know is that Akka HTTP is just a way (albeit, a great way) to build HTTP services\n\n<\/pre>\n<\/div>\n
The code behind this post is split into two repositories:<\/p>\n
    \n
  1. Ranger HTTP plugin<\/a><\/li>\n
  2. Ranger Managed Akka HTTP Service<\/a><\/li>\n<\/ol>\n
    WRITING A PLUGIN<\/h2>\n
    To reiterate what we are attempting to do here, we are going to write a REST service and let Ranger manage the authorization for it.<\/p>\n
    Writing a Ranger plugin is actually a two part problem – writing the server-side component<\/strong> and the application-side component<\/strong>.<\/p>\n
      \n
    1. Server-side component<\/strong> is the code\/configuration that resides on the Ranger side.<\/li>\n
    2. Application-side component<\/strong> is the code that resides in our REST service that invokes the Ranger service and checks if the application’s end user has access to the resource that he is requesting.<\/li>\n<\/ol>\n
      We’ll look into these two things in detail. Let’s attempt to write the server-side components first.<\/p>\n
      1. SERVER-SIDE COMPONENTS :<\/h3>\n
      As an inspiration, if we open up the ranger code base<\/a>, we can see some of the in-built plugins.<\/p>\n
      \n
      \"Apache<\/figure>\n<\/div>\n
      Pictorially, within the Ranger code base, we have bunch of plugins and we would like to add our own plugin.<\/p>\n
      \n
      \"Apache<\/figure>\n<\/div>\n
      Zooming in the previous picture, the server-side component on the plugin would mean writing a<\/p>\n
        \n
      1. servicedef configuration<\/li>\n
      2. A class that inherits RangerBaseService<\/code><\/li>\n<\/ol>\n
        So, there’s literally “one”<\/strong> configuration and “one”<\/strong> class that you need to implement for the server-side.<\/p>\n
        \n
        \"Apache<\/figure>\n<\/div>\n
        1. SERVICEDEF CONFIGURATION<\/h4>\n
        Let’s look at Hive’s servicedef configuration :<\/p>\n
        \n
        \"Apache<\/figure>\n<\/div>\n
        In my opinion, there are three important things that we are talking about here :<\/p>\n
        A. RESOURCE:<\/h5>\n
        In the Hive example, the “resource” that we are trying to protect are databases<\/strong>, tables<\/strong> and columns<\/strong>, for Kafka, the “resource” that we are trying to protect is the Kafka topic<\/strong>, for HDFS, it would be a file path<\/strong>. For our HTTP service, the resource that we are trying to protect is the REST slug<\/strong>. Let’s call it a “path”.<\/p>\n
        \"resources\": [\n    {\n      \"itemId\": 1,\n      \"name\": \"path\",\n      \"type\": \"path\",\n      \"level\": 10,\n      \"parent\": \"\",\n      \"mandatory\": true,\n      \"lookupSupported\": true,\n      \"recursiveSupported\": true,\n      \"excludesSupported\": true,\n      \"matcher\": \"org.apache.ranger.plugin.resourcematcher.RangerPathResourceMatcher\",\n      \"matcherOptions\": {\n        \"wildCard\": true,\n        \"ignoreCase\": true\n      },\n      \"validationRegEx\": \"\",\n      \"validationMessage\": \"\",\n      \"uiHint\": \"\",\n      \"label\": \"HTTP Path\",\n      \"description\": \"HTTP Path\"\n    }\n<\/pre>\n
        B. ACCESS TYPE:<\/h5>\n
        Access types simply means the kind of access that the user would require – say, for Hive, select<\/strong>, create<\/strong>, delete<\/strong> would be examples. For HDFS, read<\/strong>, write<\/strong>, execute<\/strong> would be examples. For Kafka, publish<\/strong> and consume<\/strong>. For our HTTP service, the access type would be the HTTP methods – GET<\/strong>, POST<\/strong>, DELETE<\/strong>.<\/p>\n
        \"accessTypes\": [\n    {\n      \"itemId\": 1,\n      \"name\": \"get\",\n      \"label\": \"get\"\n    },\n    {\n      \"itemId\": 2,\n      \"name\": \"post\",\n      \"label\": \"post\"\n    },\n    {\n      \"itemId\": 3,\n      \"name\": \"delete\",\n      \"label\": \"delete\"\n    }\n  ]\n<\/pre>\n
        C. CONFIGS:<\/h5>\n
        We know that Ranger can manage security for several Kakfa topics, HDFS and HBase clusters. Each of these services would be running in a different host and the way to authenticate into each of them would be different. The place to capture this information would be this configs<\/code> part. For the sake of simplicity of this example, we don’t care about authentication for our HTTP service. So, we are just capturing a URL that we could ping to, to ensure that our service is up and running.
         
        <\/div> <\/div><\/p>\n
        \"configs\": [\n    {\n      \"itemId\": 1,\n      \"name\": \"services_list_url\",\n      \"type\": \"string\",\n      \"subType\": \"\",\n      \"mandatory\": true,\n      \"validationRegEx\": \"\",\n      \"validationMessage\": \"\",\n      \"uiHint\": \"\",\n      \"label\": \"HTTP URL for the services list eg. http:\/\/localhost:8080\/services\"\n    }\n  ]\n<\/pre>\n
        2. A CLASS THAT INHERITS RANGERBASESERVICE<\/h4>\n
        The second and the last part of implementing our server-side component for the ranger plugin is to write a class that inherits the RangerBaseService<\/code>.<\/p>\n
        \n
        \"Apache<\/figure>\n<\/div>\n
        The class expects two functions to be overridden:<\/p>\n
          \n
        1. validateConfig<\/code>: Remember the configs<\/code> section of the servicedef. Obviously, we would be accepting values for those parameters right? Now, this validateConfig<\/code> is the place where we validate the values that are passed. For our HTTP service, all that we are accepting in the config is the services_list_url<\/strong>. Now, the implementation of this function would be to use a simple HTTP client to ping and check whether the service is up and running.<\/li>\n<\/ol>\n
          class RangerServiceHTTP extends RangerBaseService {\n\n  override def validateConfig(): util.Map[String, AnyRef] = {\n    if (configs.containsKey(\"services_list_url\")) {\n      val serviceUp = HttpServiceClient.isServiceUp(configs.get(\"services_list_url\"))\n      if (serviceUp) retSuccessMap() else returnFailureMap()\n    }\n    else {\n      returnFailureMap()\n    }\n  }\n<\/pre>\n
            \n
          1. lookupResource<\/code>: This is an interesting function. Consider the following screenshot.<\/li>\n<\/ol>\n
            \n
            \"Apache<\/figure>\n<\/div>\n
            Later, when we configure an access policy, we would be configuring the resources<\/strong> in it. Now, this function is used to lookup and autofill those resources. Say, if we are entering a HDFS resource or Hive table, the number of options are quite a lot and it’s easy to do a typo. In case of Hive, this function would connect to the metastore and populate the tables and databases for us.<\/p>\n
            In the case of HTTP service, remember the service_list_url<\/code>? That URL would just return a comma separated list of REST resources. For implementing this function, I am just calling the service again and tokenizing the response.<\/p>\n
             override def lookupResource(resourceLookupContext: ResourceLookupContext): util.List[String] = {\n    val serviceUrl = configs.get(\"services_list_url\")\n    HttpServiceClient.getServicePaths(serviceUrl).asJava\n  }\n<\/pre>\n
            Now, as a final step to the code, we’ll need to tie this class RangerServiceHTTP<\/code> and the servicedef configuration together. The way we do this is by configuring the class in the implClass<\/code> property. Also notice that we are configuring the name of this ranger plugin<\/em> as httpservice<\/code>:<\/p>\n
            {\n  \"name\": \"httpservice\",\n  \"label\": \"HTTP Service\",\n  \"description\": \"Rudimentary Ranger plugin to enforce security on top of a HTTP Service\",\n  \"guid\": \"b8290b7f-6f69-44a9-89cc-06b6975ea676\",\n  \"implClass\": \"com.arunma.ranger.http.RangerServiceHTTP\",\n* *   \"version\": 1,\n  \"isEnabled\": 1,\n  \"resources\": [\n    {\n      \"itemId\": 1,\n      \"name\": \"path\",\n      ...\n      ...\n<\/pre>\n
            The full configuration looks like this<\/a>.<\/p>\n
            There are two more minor administrative steps:<\/p>\n
              \n
            1. In order to ensure that our class is made available on the Ranger classpath, we’ll bundle it into a jar and drop it at <RANGER_HOME>\/ews\/webapp\/WEB-INF\/classes\/ranger-plugins\/httpservice<\/code>. The name of the folder httpservice<\/code> corresponds to the name that is declared in the servicedef<\/code> configuration.<\/li>\n<\/ol>\n
              \n
              \"Apache<\/figure>\n<\/div>\n
                \n
              1. Upload our configuration into Ranger so that our service becomes visible in the Ranger UI.<\/li>\n<\/ol>\n
                curl -u admin:admin -X POST -H \"Accept: application\/json\" -H \"Content-Type: application\/json\" --data @http-ranger.json http:\/\/localhost:6080\/service\/plugins\/definitions\n<\/pre>\n
                Bounce the Ranger server.<\/p>\n
                Yaay! We now see HTTPSERVICE<\/strong> on our Ranger UI<\/p>\n
                \n
                \"Apache<\/figure>\n<\/div>\n
                2. APPLICATION-SIDE COMPONENTS :<\/h3>\n
                On the application side, things couldn’t get any simpler. In order to use the policies used in Ranger, all that an application would need to do is to call Ranger and check if the user has access to a resource. The function is literally called isAccessAllowed<\/code>.<\/p>\n
                \n
                \"Apache<\/figure>\n<\/div>\n
                The following code is pretty much all that needs to be written on the application side:<\/p>\n
                package com.arunma.ranger\n\nimport org.apache.ranger.plugin.audit.RangerDefaultAuditHandler\nimport org.apache.ranger.plugin.policyengine.{RangerAccessRequestImpl, RangerAccessResourceImpl}\nimport org.apache.ranger.plugin.service.RangerBasePlugin\n\nimport scala.collection.JavaConverters._\n\nobject RangerAuthorizer {\n  lazy val plugin = {\n    val plg = new RangerBasePlugin(\"httpservice\", \"httpservice\")\n    plg.setResultProcessor(new RangerDefaultAuditHandler)\n    plg.init()\n    plg\n  }\n\n  def authorize(path: String, accessType: String, userName: String, userGroups: Set[String] = Set(\"public\")): Boolean = {\n    val resource = new RangerAccessResourceImpl()\n    resource.setValue(\"path\", path)\n    val request = new RangerAccessRequestImpl(resource, accessType, userName, userGroups.asJava)\n    val result = plugin.isAccessAllowed(request)\n    result != null && result.getIsAllowed\n  }\n}\n<\/pre>\n
                The RangerBasePlugin(\"httpservice\", \"httpservice\")<\/code> and the init()<\/code> function serves as our entry point into the Ranger service. Note the httpservice<\/code> parameter inside the RangerBasePlugin<\/code>. This must match the name that was given in the servicedef configuration.<\/p>\n
                The authorize<\/code> function is the one that gets called by the interceptor just before the client is given access to a REST resource. The function simply constructs a AccessRequest – the RangerAccessRequestImpl<\/code> and calls the plugin’s isAccessAllowed<\/code> function, which returns a Boolean<\/code>.<\/p>\n
                The interceptor directive<\/a> authorize<\/code> invokes the function isRangerAuthorized<\/code> which then calls the authorize<\/code> function in RangerAuthorizer.<\/p>\n
                def isRangerAuthorized(path: String, httpMethod: String, userName: String): Boolean = RangerAuthorizer.authorize(path, httpMethod.toLowerCase, userName)  \n\nlazy val userRoutes: Route =\n    headerValueByName(\"username\") { userName =>\n      extractMethod { method =>\n        pathPrefix(\"users\") {\n          extractMatchedPath { matchedPath =>\n            authorize(isRangerAuthorized(matchedPath.toString(), method.name(), userName)) {\n              concat(\n                pathEnd {\n                  concat(\n                    get {\n                      val users: Future[Users] =\n                        (userRegistryActor ? GetUsers).mapTo[Users]\n                      complete(users)\n<\/pre>\n
                One last thing that we are required to do is to copy an audit<\/code> and security<\/code> xml into our classpath. These are like the site xmls<\/strong> for Ranger. For this exercise, we’ll just place the xmls in our resources<\/code> directory.<\/p>\n
                The audit<\/code> xml and the security<\/code> xml could be copied from the ranger codebase<\/a>. If you are running a local ranger, the audit XML can remain as-is but security<\/code> xml needs to be changed for our service. The easiest way to achieve this is to copy a sample xml from the ranger code base and start replacing the service as httpservice<\/code> like so:<\/p>\n
                \n
                \"Apache<\/figure>\n<\/div>\n
                There’s also one property that needs special attention. That’s the property called ranger.plugin.httpservice.service.name<\/code>. This property’s value must be the same as the Service Name<\/strong> that you use in your Ranger UI.<\/p>\n
                <property>\n\t<name>ranger.plugin.httpservice.service.name<\/name>\n\t<value>MyService<\/value>\n\t<description>\n\t\tName of the Ranger service containing policies for this httpservice instance\n\t<\/description>\n<\/property>\n<\/pre>\n
                \n
                \"Apache<\/figure>\n<\/div>\n
                TEST RIDE<\/h2>\n
                This would involve two steps<\/p>\n
                  \n
                1. Configure a Ranger Policy<\/li>\n
                2. Verifying your HTTP Service<\/li>\n<\/ol>\n
                  1. CONFIGURE A RANGER POLICY<\/h4>\n
                  \n
                  \"Apache<\/figure>\n<\/div>\n
                  2. VERIFYING YOUR HTTP SERVICE<\/h4>\n
                  Let’s verify the policy by bringing up our HTTP Service – start the com.arunma.RangerManagedHttpServer<\/code><\/p>\n
                  Policy-configured user<\/strong><\/p>\n
                  \n
                  \ncurl -X GET -H 'username:arunma' http:\/\/localhost:8080\/users\n<\/pre>\n<\/div>\n
                  \n
                  \"Apache<\/figure>\n<\/div>\n
                  Invalid user<\/strong><\/p>\n
                  \n
                  \ncurl -X GET -H 'username:nobody' http:\/\/localhost:8080\/users\n<\/pre>\n<\/div>\n
                  \n
                  \"Apache<\/figure>\n<\/div>\n
                  SUMMARY<\/h2>\n
                  The Ranger plugin has two parts to it – a server-side component and a client-side component. For the server-side component, we created a servicedeef<\/code>json and a class that inherited the RangerBaseService<\/code>. For the client side-component, we just called an isAccessAllowed<\/code> function of the plugin<\/code>.<\/p>\n
                  You now have a working Ranger authorized HTTP Service.<\/p>\n
                  Thanks for reading. Happy Hacking !<\/p>\n
                  \n\n\n\n
                  Published on Java Code Geeks with permission by Arun Manivannan, partner at our JCG program<\/a>. See the original article here: The beautiful simplicity of Apache Ranger plugin<\/a><\/p>\n
                  Opinions expressed by Java Code Geeks contributors are their own.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
                  If you are here, you already know what Apache Ranger is. It is the most popular, if not the only, way to manage security in the Hadoop framework. It has integrations with Active Directory, Kerberos and various others for authentication but I believe the most interesting feature is its authorization support. Being part of the Hadoop ecosystem, …<\/p>\n","protected":false},"author":287,"featured_media":227,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[677,1899,1831],"class_list":["post-91835","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-enterprise-java","tag-hadoop","tag-ranger","tag-scala"],"yoast_head":"\nThe beautiful simplicity of Apache Ranger plugin - Java Code Geeks<\/title>\n<meta name=\"description\" content=\"Interested to learn about Apache Ranger plugin? Check our article explaining how you can manage security in the Hadoop framework with apache ranger plugin.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The beautiful simplicity of Apache Ranger plugin - Java Code Geeks\" \/>\n<meta property=\"og:description\" content=\"Interested to learn about Apache Ranger plugin? Check our article explaining how you can manage security in the Hadoop framework with apache ranger plugin.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html\" \/>\n<meta property=\"og:site_name\" content=\"Java Code Geeks\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/javacodegeeks\" \/>\n<meta property=\"article:published_time\" content=\"2019-05-15T13:00:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.javacodegeeks.com\/wp-content\/uploads\/2012\/10\/scala-logo.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"150\" \/>\n\t<meta property=\"og:image:height\" content=\"150\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Arun Manivannan\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@javacodegeeks\" \/>\n<meta name=\"twitter:site\" content=\"@javacodegeeks\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Arun Manivannan\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html\"},\"author\":{\"name\":\"Arun Manivannan\",\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/#\\\/schema\\\/person\\\/c7775dd45c5b0728bb6171194497e152\"},\"headline\":\"The beautiful simplicity of Apache Ranger plugin\",\"datePublished\":\"2019-05-15T13:00:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html\"},\"wordCount\":1456,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.javacodegeeks.com\\\/wp-content\\\/uploads\\\/2012\\\/10\\\/scala-logo.jpg\",\"keywords\":[\"Hadoop\",\"ranger\",\"Scala\"],\"articleSection\":[\"Enterprise Java\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html\",\"url\":\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html\",\"name\":\"The beautiful simplicity of Apache Ranger plugin - Java Code Geeks\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.javacodegeeks.com\\\/wp-content\\\/uploads\\\/2012\\\/10\\\/scala-logo.jpg\",\"datePublished\":\"2019-05-15T13:00:04+00:00\",\"description\":\"Interested to learn about Apache Ranger plugin? Check our article explaining how you can manage security in the Hadoop framework with apache ranger plugin.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html#primaryimage\",\"url\":\"https:\\\/\\\/www.javacodegeeks.com\\\/wp-content\\\/uploads\\\/2012\\\/10\\\/scala-logo.jpg\",\"contentUrl\":\"https:\\\/\\\/www.javacodegeeks.com\\\/wp-content\\\/uploads\\\/2012\\\/10\\\/scala-logo.jpg\",\"width\":150,\"height\":150},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/2019\\\/05\\\/beautiful-simplicity-apache-ranger-plugin.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.javacodegeeks.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Java\",\"item\":\"https:\\\/\\\/www.javacodegeeks.com\\\/category\\\/java\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Enterprise Java\",\"item\":\"https:\\\/\\\/www.javacodegeeks.com\\\/category\\\/java\\\/enterprise-java\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"The beautiful simplicity of Apache Ranger plugin\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/#website\",\"url\":\"https:\\\/\\\/www.javacodegeeks.com\\\/\",\"name\":\"Java Code Geeks\",\"description\":\"Java Developers Resource Center\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/#organization\"},\"alternateName\":\"JCG\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.javacodegeeks.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/#organization\",\"name\":\"Exelixis Media P.C.\",\"url\":\"https:\\\/\\\/www.javacodegeeks.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.javacodegeeks.com\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/exelixis-logo.png\",\"contentUrl\":\"https:\\\/\\\/www.javacodegeeks.com\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/exelixis-logo.png\",\"width\":864,\"height\":246,\"caption\":\"Exelixis Media P.C.\"},\"image\":{\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/javacodegeeks\",\"https:\\\/\\\/x.com\\\/javacodegeeks\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.javacodegeeks.com\\\/#\\\/schema\\\/person\\\/c7775dd45c5b0728bb6171194497e152\",\"name\":\"Arun Manivannan\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fecbd2c62933013fa13416ad9a930bacd9edcc34dc9b3227de9f2495f9758472?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fecbd2c62933013fa13416ad9a930bacd9edcc34dc9b3227de9f2495f9758472?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fecbd2c62933013fa13416ad9a930bacd9edcc34dc9b3227de9f2495f9758472?s=96&d=mm&r=g\",\"caption\":\"Arun Manivannan\"},\"sameAs\":[\"http:\\\/\\\/www.rerun.me\\\/\"],\"url\":\"https:\\\/\\\/www.javacodegeeks.com\\\/author\\\/Arun-Manivannan\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The beautiful simplicity of Apache Ranger plugin - Java Code Geeks","description":"Interested to learn about Apache Ranger plugin? Check our article explaining how you can manage security in the Hadoop framework with apache ranger plugin.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html","og_locale":"en_US","og_type":"article","og_title":"The beautiful simplicity of Apache Ranger plugin - Java Code Geeks","og_description":"Interested to learn about Apache Ranger plugin? Check our article explaining how you can manage security in the Hadoop framework with apache ranger plugin.","og_url":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html","og_site_name":"Java Code Geeks","article_publisher":"https:\/\/www.facebook.com\/javacodegeeks","article_published_time":"2019-05-15T13:00:04+00:00","og_image":[{"width":150,"height":150,"url":"https:\/\/www.javacodegeeks.com\/wp-content\/uploads\/2012\/10\/scala-logo.jpg","type":"image\/jpeg"}],"author":"Arun Manivannan","twitter_card":"summary_large_image","twitter_creator":"@javacodegeeks","twitter_site":"@javacodegeeks","twitter_misc":{"Written by":"Arun Manivannan","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html#article","isPartOf":{"@id":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html"},"author":{"name":"Arun Manivannan","@id":"https:\/\/www.javacodegeeks.com\/#\/schema\/person\/c7775dd45c5b0728bb6171194497e152"},"headline":"The beautiful simplicity of Apache Ranger plugin","datePublished":"2019-05-15T13:00:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html"},"wordCount":1456,"commentCount":0,"publisher":{"@id":"https:\/\/www.javacodegeeks.com\/#organization"},"image":{"@id":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html#primaryimage"},"thumbnailUrl":"https:\/\/www.javacodegeeks.com\/wp-content\/uploads\/2012\/10\/scala-logo.jpg","keywords":["Hadoop","ranger","Scala"],"articleSection":["Enterprise Java"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html","url":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html","name":"The beautiful simplicity of Apache Ranger plugin - Java Code Geeks","isPartOf":{"@id":"https:\/\/www.javacodegeeks.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html#primaryimage"},"image":{"@id":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html#primaryimage"},"thumbnailUrl":"https:\/\/www.javacodegeeks.com\/wp-content\/uploads\/2012\/10\/scala-logo.jpg","datePublished":"2019-05-15T13:00:04+00:00","description":"Interested to learn about Apache Ranger plugin? Check our article explaining how you can manage security in the Hadoop framework with apache ranger plugin.","breadcrumb":{"@id":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html#primaryimage","url":"https:\/\/www.javacodegeeks.com\/wp-content\/uploads\/2012\/10\/scala-logo.jpg","contentUrl":"https:\/\/www.javacodegeeks.com\/wp-content\/uploads\/2012\/10\/scala-logo.jpg","width":150,"height":150},{"@type":"BreadcrumbList","@id":"https:\/\/www.javacodegeeks.com\/2019\/05\/beautiful-simplicity-apache-ranger-plugin.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.javacodegeeks.com\/"},{"@type":"ListItem","position":2,"name":"Java","item":"https:\/\/www.javacodegeeks.com\/category\/java"},{"@type":"ListItem","position":3,"name":"Enterprise Java","item":"https:\/\/www.javacodegeeks.com\/category\/java\/enterprise-java"},{"@type":"ListItem","position":4,"name":"The beautiful simplicity of Apache Ranger plugin"}]},{"@type":"WebSite","@id":"https:\/\/www.javacodegeeks.com\/#website","url":"https:\/\/www.javacodegeeks.com\/","name":"Java Code Geeks","description":"Java Developers Resource Center","publisher":{"@id":"https:\/\/www.javacodegeeks.com\/#organization"},"alternateName":"JCG","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.javacodegeeks.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.javacodegeeks.com\/#organization","name":"Exelixis Media P.C.","url":"https:\/\/www.javacodegeeks.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.javacodegeeks.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.javacodegeeks.com\/wp-content\/uploads\/2022\/06\/exelixis-logo.png","contentUrl":"https:\/\/www.javacodegeeks.com\/wp-content\/uploads\/2022\/06\/exelixis-logo.png","width":864,"height":246,"caption":"Exelixis Media P.C."},"image":{"@id":"https:\/\/www.javacodegeeks.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/javacodegeeks","https:\/\/x.com\/javacodegeeks"]},{"@type":"Person","@id":"https:\/\/www.javacodegeeks.com\/#\/schema\/person\/c7775dd45c5b0728bb6171194497e152","name":"Arun Manivannan","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fecbd2c62933013fa13416ad9a930bacd9edcc34dc9b3227de9f2495f9758472?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fecbd2c62933013fa13416ad9a930bacd9edcc34dc9b3227de9f2495f9758472?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fecbd2c62933013fa13416ad9a930bacd9edcc34dc9b3227de9f2495f9758472?s=96&d=mm&r=g","caption":"Arun Manivannan"},"sameAs":["http:\/\/www.rerun.me\/"],"url":"https:\/\/www.javacodegeeks.com\/author\/Arun-Manivannan"}]}},"_links":{"self":[{"href":"https:\/\/www.javacodegeeks.com\/wp-json\/wp\/v2\/posts\/91835","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.javacodegeeks.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.javacodegeeks.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.javacodegeeks.com\/wp-json\/wp\/v2\/users\/287"}],"replies":[{"embeddable":true,"href":"https:\/\/www.javacodegeeks.com\/wp-json\/wp\/v2\/comments?post=91835"}],"version-history":[{"count":0,"href":"https:\/\/www.javacodegeeks.com\/wp-json\/wp\/v2\/posts\/91835\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.javacodegeeks.com\/wp-json\/wp\/v2\/media\/227"}],"wp:attachment":[{"href":"https:\/\/www.javacodegeeks.com\/wp-json\/wp\/v2\/media?parent=91835"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.javacodegeeks.com\/wp-json\/wp\/v2\/categories?post=91835"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.javacodegeeks.com\/wp-json\/wp\/v2\/tags?post=91835"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}