ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Abhay Kulkarni <akulka...@hortonworks.com>
Subject Review Request 72866: RANGER-2948: Ranger plugins to support a hook to register plugin chains - Part 2
Date Sun, 13 Sep 2020 16:05:29 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/72866/
-----------------------------------------------------------

Review request for ranger, Madhan Neethiraj, Mehul Parikh, Ramesh Mani, Sailaja Polavarapu,
and Velmurugan Periasamy.


Bugs: RANGER-2948
    https://issues.apache.org/jira/browse/RANGER-2948


Repository: ranger


Description
-------

Ranger plugins authorize access based on resource-based and classification-based policies
defined in a service. RangerBasePlugin abstraction in plugins-common library deals with details
of retrieving/refreshing of policies/classifications from Ranger Admin, caching retrieved
policies/classifications, building policy-engine, etc. Enhancing this abstraction to support
additional plugins that can influence authorization decision, for example by consulting another
system, can help address deployment specific needs.

This follow-up patch contains infrastructure scripts for persisting supporting data required
to support mapping resources from one service to another, and resolves issue seen in deploying
chained plugin in SSL enabled cluster.


Diffs
-----

  agents-common/src/main/java/org/apache/ranger/authorization/hadoop/config/RangerChainedPluginConfig.java
9e25ae1aa 
  agents-common/src/main/java/org/apache/ranger/authorization/hadoop/config/RangerPluginConfig.java
43004cb53 
  security-admin/db/mysql/optimized/current/ranger_core_db_mysql.sql e9f41eab3 
  security-admin/db/mysql/patches/049-create-rms-schema.sql PRE-CREATION 
  security-admin/db/oracle/optimized/current/ranger_core_db_oracle.sql 9d7556c17 
  security-admin/db/oracle/patches/049-create-rms-schema.sql PRE-CREATION 
  security-admin/db/postgres/optimized/current/ranger_core_db_postgres.sql 8b4a713c3 
  security-admin/db/postgres/patches/049-create-rms-schema.sql PRE-CREATION 
  security-admin/db/sqlanywhere/optimized/current/ranger_core_db_sqlanywhere.sql d46e57a35

  security-admin/db/sqlanywhere/patches/049-create-rms-schema.sql PRE-CREATION 
  security-admin/db/sqlserver/optimized/current/ranger_core_db_sqlserver.sql d4476a314 
  security-admin/db/sqlserver/patches/049-create-rms-schema.sql PRE-CREATION 
  security-admin/src/main/java/org/apache/ranger/biz/ServiceDBStore.java fd99a8843 
  security-admin/src/main/java/org/apache/ranger/common/AppConstants.java e3a7bdcff 
  security-admin/src/main/java/org/apache/ranger/db/RangerDaoManagerBase.java 74c3dd04b 
  security-admin/src/main/java/org/apache/ranger/db/XXRMSMappingProviderDao.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/db/XXRMSNotificationDao.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/db/XXRMSResourceMappingDao.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/db/XXRMSServiceResourceDao.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/entity/XXRMSMappingProvider.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/entity/XXRMSNotification.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/entity/XXRMSResourceMapping.java PRE-CREATION

  security-admin/src/main/java/org/apache/ranger/entity/XXRMSServiceResource.java PRE-CREATION

  security-admin/src/main/resources/META-INF/jpa_named_queries.xml 58132091f 


Diff: https://reviews.apache.org/r/72866/diff/1/


Testing
-------

Tested with SSL enabled cluster


Thanks,

Abhay Kulkarni


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message