You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "Madhan Neethiraj (Jira)" <ji...@apache.org> on 2024/10/28 23:41:00 UTC

[jira] [Created] (RANGER-4970) Condition to support validity schedule

Madhan Neethiraj created RANGER-4970:
----------------------------------------

             Summary: Condition to support validity schedule
                 Key: RANGER-4970
                 URL: https://issues.apache.org/jira/browse/RANGER-4970
             Project: Ranger
          Issue Type: Improvement
          Components: admin, plugins
            Reporter: Madhan Neethiraj
            Assignee: Madhan Neethiraj


Ranger policy model currently supports validity schedule at the policy level, which allows a policy author to allow/deny permissions for specific time periods. This should be extended at policy-item level, so that permissions call be allowed/denied for individual principals for a specific time periods. RANGER-3815 asked for this enhancement, which was addressed with introduction of macros. However, supporting validity schedule, similar to the one at policy level, will make it consistent.

 

Custom conditions supported by Ranger policy model can be extended to provide this functionality, by adding a condition that takes validity schedule as the input. Policy UI can be enhanced to provide the same experience for policy items as at the policy level.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)