[jira] [Commented] (RANGER-4970) Condition to support validity schedule

["Pradeep Agrawal (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RANGER-4970?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17896620#comment-17896620 ] 

Pradeep Agrawal commented on RANGER-4970:
-----------------------------------------

Reopening this as its causing junit test failures:
{code:java}
[ERROR] Failures: 
[ERROR]   TestRangerValidityScheduleConditionEvaluator.testBothStartAndEndTime:61 expected: <true> but was: <false>
[ERROR]   TestRangerValidityScheduleConditionEvaluator.testMultipleSchedules:112 expected: <true> but was: <false>
[ERROR]   TestRangerValidityScheduleConditionEvaluator.testOnlyEndTime:96 expected: <false> but was: <true>
[ERROR]   TestRangerValidityScheduleConditionEvaluator.testOnlyStartTime:77 expected: <true> but was: <false>
[INFO] 
[ERROR] Tests run: 282, Failures: 4, Errors: 0, Skipped: 0 {code}

> Condition to support validity schedule
> --------------------------------------
>
>                 Key: RANGER-4970
>                 URL: https://issues.apache.org/jira/browse/RANGER-4970
>             Project: Ranger
>          Issue Type: Improvement
>          Components: admin, plugins
>            Reporter: Madhan Neethiraj
>            Assignee: Madhan Neethiraj
>            Priority: Major
>             Fix For: 3.0.0, 2.6.0
>
>         Attachments: RANGER-4970.patch
>
>
> Ranger policy model currently supports validity schedule at the policy level, which allows a policy author to allow/deny permissions for specific time periods. This should be extended at policy-item level, so that permissions call be allowed/denied for individual principals for a specific time periods. RANGER-3815 asked for this enhancement, which was addressed with introduction of macros. However, supporting validity schedule, similar to the one at policy level, will make it consistent.
>  
> Custom conditions supported by Ranger policy model can be extended to provide this functionality, by adding a condition that takes validity schedule as the input. Policy UI can be enhanced to provide the same experience for policy items as at the policy level.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)