@drewski7 Ranger plugins that use Ranger as an authorization module will cache local policy and use the same for authorization purposes Ranger plugins cache the tags and periodically poll the tag store for any changes. When a change is detected, the plugins update the cache. In addition, the plugins store the tag details in a local cache file – just as the policies are stored in a local cache file. When the component restarts, the plugins will use the tag data from the local cache file if the tag store is not reachable. At periodic intervals , a plugin polls the Ranger Admin to retrieve the updated version of policies. The policies are cached locally by the plugin and used for access control The Policy evaluation and policy enforcement happens within the service process. The heart of this processing is the “Policy Engine”. It uses a memory resident-cached set of policies. Ranger takes 30secs to refresh policies check the "Plugin" option in the ranger UI but you can change the refresh time In Ambari UI->HDFS->Services->Configs->"Advance ranger-hdfs-security" you can change the poll interval here[refresh time]. Geoffrey
... View more
