[ https://issues.apache.org/jira/browse/RANGER-1169?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Abhay Kulkarni updated RANGER-1169:
-----------------------------------
Description:
Ranger supports global auditing with the configuration parameters:
ranger.audit.global.mode, ranger.audit.servicedef.<service-type>.mode and ranger.audit.service.<service-name>.mode.
The global audit setting derived from these parameters' values should always be honored by
the plug-ins.
was:
Ranger supports global auditing with the configuration parameters:
ranger.audit.global.mode, ranger.audit.servicedef.<service-type>.mode and ranger.audit.service.<service-name>.mode.
If these parameters' values indicate that the access to the component with that service-type
and service-name is always to be audited, and if there are no ranger-policies defined for
the component with that service-type and service-name in ranger-admin, then accesses to the
component do not generate audit records. The global audit flag should be honored irrespective
of existence of any ranger access policies.
> If a component has no Ranger policies specified then audit record is not created even
if Ranger configuration requires to audit all accesses for that component
> ---------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: RANGER-1169
> URL: https://issues.apache.org/jira/browse/RANGER-1169
> Project: Ranger
> Issue Type: Bug
> Components: plugins
> Affects Versions: 0.6.1
> Reporter: Abhay Kulkarni
> Assignee: Abhay Kulkarni
> Priority: Minor
> Fix For: 0.7.0
>
>
> Ranger supports global auditing with the configuration parameters:
> ranger.audit.global.mode, ranger.audit.servicedef.<service-type>.mode and ranger.audit.service.<service-name>.mode.
The global audit setting derived from these parameters' values should always be honored by
the plug-ins.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
|