ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Madhan Neethiraj (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (ARGUS-17) Grant/revoke to update policies in Argus
Date Fri, 22 Aug 2014 03:18:11 GMT

    [ https://issues.apache.org/jira/browse/ARGUS-17?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14106399#comment-14106399
] 

Madhan Neethiraj edited comment on ARGUS-17 at 8/22/14 3:17 AM:
----------------------------------------------------------------

ARGUS-17.1.patch
- added configuration
 'xasecure.hive.authorizer.update.xapolicies.on.grant.revoke' to
 enable/disable updating XAPolicies for GRANT/REVOKE. Enabled by default.
- updated to have access-check for GRANT/REVOKE done at security admin (instead of at the
agent), as the logic to determine the access could be involved and can change (for example
to restrict permissions that can be granted by the user)
- updates for change in REST interface (a single list permMapList,
 instead of two lists - userPermMap, groupPermMap)
- authz APIs that are not implemented in XAHiveAuthroizer will now raise exception with message
containing string "not implemented in Argus HiveAuthorizer"


was (Author: madhan.neethiraj):
- added configuration
 'xasecure.hive.authorizer.update.xapolicies.on.grant.revoke' to
 enable/disable updating XAPolicies for GRANT/REVOKE. Enabled by default.
- updated to have access-check for GRANT/REVOKE done at security admin (instead of at the
agent), as the logic to determine the access could be involved and can change (for example
to restrict permissions that can be granted by the user)
- updates for change in REST interface (a single list permMapList,
 instead of two lists - userPermMap, groupPermMap)
- authz APIs that are not implemented in XAHiveAuthroizer will now raise exception with message
containing string "not implemented in Argus HiveAuthorizer"

> Grant/revoke to update policies in Argus
> ----------------------------------------
>
>                 Key: ARGUS-17
>                 URL: https://issues.apache.org/jira/browse/ARGUS-17
>             Project: Argus
>          Issue Type: Bug
>            Reporter: Madhan Neethiraj
>            Assignee: Madhan Neethiraj
>         Attachments: ARGUS-17.1.patch, ARGUS-17.patch
>
>
> Update Argus policies for the changes in permissions done using Hive grant/revoke statements.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message