You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Kishor Gollapalliwar (Jira)" <ji...@apache.org> on 2023/04/19 13:59:00 UTC
[jira] [Updated] (RANGER-4182) Ranger Admin - Enable isRecursive option to additional default policies while service creation
[ https://issues.apache.org/jira/browse/RANGER-4182?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Kishor Gollapalliwar updated RANGER-4182:
-----------------------------------------
Fix Version/s: 3.0.0
> Ranger Admin - Enable isRecursive option to additional default policies while service creation
> ----------------------------------------------------------------------------------------------
>
> Key: RANGER-4182
> URL: https://issues.apache.org/jira/browse/RANGER-4182
> Project: Ranger
> Issue Type: Improvement
> Components: Ranger
> Reporter: Kishor Gollapalliwar
> Assignee: Kishor Gollapalliwar
> Priority: Major
> Fix For: 3.0.0
>
>
> Currently while service creation when we create additional default policies via curl we do not have option to support isRecursive. This is mostly due to [https://github.com/apache/ranger/blob/2d9af00153e8326c7b5eb80e7c86e1e8988dfbdc/agents-common/src/main/java/org/apache/ranger/plugin/service/RangerBaseService.java#L209,] where we are setting it explicitly false. We need a mechanism where in user should be able to dynamically enable/ disable is-isRecursive option for a resource using JSON provided.
>
> Sample curl command to create service & additional default policies
> {code:java}
> curl -u admin:<ADMIN_PASSWORD> -ivk -H "Accept:application/json" -H "Content-Type:application/json" -X POST 'http://localhost:6080/service/plugins/services' -d @hive_test.json {code}
> {code:java}
> vim hive_test.json
> { "isEnabled": "true", "type": "hive", "configs": { "username": "hive", "password": "hive", "cluster.name": "My Dummy Cluster", "jdbc.driverClassName": "org.apache.hive.jdbc.HiveDriver", "jdbc.url": "none", "enable.hive.metastore.lookup": "true", "hive.site.file.path": "/etc/hive/conf/hive-site.xml", "policy.download.auth.users": "hive,hdfs,impala", "tag.download.auth.users": "hive,hdfs,impala", "policy.grantrevoke.auth.users": "hive,impala", "setup.additional.default.policies": "true", "default-policy.1.name": "User URL Policy", "default-policy.1.resource.url": "/test/kishor", "default-policy.1.policyItem.1.users": "kishor", "default-policy.1.policyItem.1.accessTypes": "read,write", "default-policy.1.resource-flag.is-recursive": "true", "default.policy.users": "impala,hive,hue,beacon,admin,dpprofiler" }, "name": "hive_test", "displayName": "Hive service", "description": "Hive repository/ service for Kishor" }
> {code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)