Ok. I am very confused with this Ranger product. There is no proper documentation on this aspect. Dose Ranger authenticate a user before accessing HDFS content? Is it just for authorization purpose only? I got some consultant say, if you just use Ranger for Hdfs, you can fake as someone else and connect to the HDFS. For example, you have a user called phil and john. They have /tenent/users/phil and /users/john respectively. Both directories has directory level permission to only that particular user and for group owner hdfs. Is it possible for Phil to create a unix account as john on a linux box. Sudo as john on that machine and access hdfs as john. There by faking himself as john. Appreciate any insights on this
... View more
