ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dilli Dorai Minnal Arumugam (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (RANGER-704) Service enable/disable should refresh the policies in the plugins
Date Thu, 22 Oct 2015 04:11:27 GMT

    [ https://issues.apache.org/jira/browse/RANGER-704?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14968505#comment-14968505

Dilli Dorai Minnal Arumugam commented on RANGER-704:

One possibility:

Rename the label as:  Enable Policy Updates

If this is not checked, no policy updates would be allowed.
This shal be implemented in ranger-admin.

A top level admin who has made bunch of delegations, could temporarily block all the delegated
admins meddling with policies while the top level admin is investigating something.

> Service enable/disable should refresh the policies in the plugins
> -----------------------------------------------------------------
>                 Key: RANGER-704
>                 URL: https://issues.apache.org/jira/browse/RANGER-704
>             Project: Ranger
>          Issue Type: Bug
>          Components: admin
>    Affects Versions: 0.5.0
>            Reporter: Madhan Neethiraj
>            Assignee: Abhay Kulkarni
> When a service is disabled, the plugins should be refreshed with empty policy list -
as if no policy exists in the service. In this case, the components like HDFS and YARN will
enforce component ACLs (since fallback is set to true by default); other components will deny
any access - since there is no policy exists to allow any access. And when the service is
enabled, the plugins should be refreshed with the policies in the service. To achieve this:
>  - the policyVersion associated with the service should be incremented whenever the service
is enabled or disabled. So that the next policy refresh call will send updated policy list
>  - the policy refresh implementation should return empty policy list when service is

This message was sent by Atlassian JIRA

View raw message