ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dhaval Shah <dhavalshah9...@gmail.com>
Subject Re: Review Request 72836: RANGER-2983 : Add hbase users with Decrypteek permission in default policy for kms
Date Tue, 08 Sep 2020 06:59:48 GMT

This is an automatically generated e-mail. To reply, visit:

(Updated Sept. 8, 2020, 6:59 a.m.)

Review request for ranger, Ankita Sinha, bhavik patel, Gautam Borad, Jayendra Parab, Mehul
Parikh, Pradeep Agrawal, and Velmurugan Periasamy.

Bugs: RANGER-2983

Repository: ranger


At present we have following user and permission mapping for default policies on KMS
Hdfs => Get Metadata , Generate EEK
Hive => Get Metadata , Decrypt EEK

Similarly we need to hbase user with decrepeek permission


  plugin-kms/src/main/java/org/apache/ranger/services/kms/RangerServiceKMS.java d33d608bf

  security-admin/src/main/resources/conf.dist/ranger-admin-site.xml c4109847f 

Diff: https://reviews.apache.org/r/72836/diff/1/

Testing (updated)

Successfully created defualt policy for Ranger KMS with hbase user having decrepeek permission.


Dhaval Shah

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message