You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ranger.apache.org by ma...@apache.org on 2024/01/10 15:19:59 UTC
(ranger) branch master updated: RANGER-4628: updated validations for security-zone partial update API
This is an automated email from the ASF dual-hosted git repository.
madhan pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ranger.git
The following commit(s) were added to refs/heads/master by this push:
new c9da69b15 RANGER-4628: updated validations for security-zone partial update API
c9da69b15 is described below
commit c9da69b15faba0183d461fd4ed88012ce1a6e426
Author: prashant <pr...@gmail.com>
AuthorDate: Thu Dec 28 11:38:43 2023 +0530
RANGER-4628: updated validations for security-zone partial update API
Signed-off-by: Madhan Neethiraj <ma...@apache.org>
---
.../plugin/util/RangerSecurityZoneHelper.java | 32 +++++++++++++++++-----
1 file changed, 25 insertions(+), 7 deletions(-)
diff --git a/agents-common/src/main/java/org/apache/ranger/plugin/util/RangerSecurityZoneHelper.java b/agents-common/src/main/java/org/apache/ranger/plugin/util/RangerSecurityZoneHelper.java
index 72ec4a4c7..5c2f5ea0f 100644
--- a/agents-common/src/main/java/org/apache/ranger/plugin/util/RangerSecurityZoneHelper.java
+++ b/agents-common/src/main/java/org/apache/ranger/plugin/util/RangerSecurityZoneHelper.java
@@ -135,12 +135,18 @@ public class RangerSecurityZoneHelper {
if (zoneServiceHelper.getResourceCount() == 0) {
removeService(serviceName);
}
+ } else {
+ throw new Exception(serviceName + ": service not in zone");
}
}
}
if (changeData.getTagServicesToAdd() != null) {
- changeData.getTagServicesToAdd().forEach(tagService -> addIfAbsent(tagService, zone.getTagServices()));
+ for (String tagServiceToAdd : changeData.getTagServicesToAdd()) {
+ if (!addIfAbsent(tagServiceToAdd, zone.getTagServices())) {
+ throw new Exception(tagServiceToAdd + ": tag service already exists in zone");
+ }
+ }
}
if (changeData.getTagServicesToRemove() != null) {
@@ -170,14 +176,20 @@ public class RangerSecurityZoneHelper {
return zone;
}
- private void addPrincipals(List<RangerPrincipal> principals, List<String> users, List<String> groups, List<String> roles) {
+ private void addPrincipals(List<RangerPrincipal> principals, List<String> users, List<String> groups, List<String> roles) throws Exception {
for (RangerPrincipal principal : principals) {
+ boolean isAdded = false;
+
if (principal.getType() == RangerPrincipal.PrincipalType.USER) {
- addIfAbsent(principal.getName(), users);
+ isAdded = addIfAbsent(principal.getName(), users);
} else if (principal.getType() == RangerPrincipal.PrincipalType.GROUP) {
- addIfAbsent(principal.getName(), groups);
+ isAdded = addIfAbsent(principal.getName(), groups);
} else if (principal.getType() == RangerPrincipal.PrincipalType.ROLE) {
- addIfAbsent(principal.getName(), roles);
+ isAdded = addIfAbsent(principal.getName(), roles);
+ }
+
+ if(!isAdded) {
+ throw new Exception(principal + ": principal already an admin or auditor in zone");
}
}
}
@@ -200,10 +212,16 @@ public class RangerSecurityZoneHelper {
}
}
- private void addIfAbsent(String item, List<String> lst) {
+ private boolean addIfAbsent(String item, List<String> lst) {
+ final boolean ret;
+
if (!lst.contains(item)) {
- lst.add(item);
+ ret = lst.add(item);
+ } else {
+ ret = false;
}
+
+ return ret;
}
public static class RangerSecurityZoneServiceHelper {