You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "Fateh Singh (Jira)" <ji...@apache.org> on 2024/12/13 20:18:00 UTC

[jira] [Resolved] (RANGER-5001) Ignore denials for descendent resources

     [ https://issues.apache.org/jira/browse/RANGER-5001?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Fateh Singh resolved RANGER-5001.
---------------------------------
    Resolution: Fixed

[https://github.com/apache/ranger/commit/316049090a560f641d7774bbe7ef6490881eac22] 

> Ignore denials for descendent resources
> ---------------------------------------
>
>                 Key: RANGER-5001
>                 URL: https://issues.apache.org/jira/browse/RANGER-5001
>             Project: Ranger
>          Issue Type: Improvement
>          Components: Ranger
>            Reporter: Abhay Kulkarni
>            Assignee: Fateh Singh
>            Priority: Major
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> Ranger policy engine currently supports finding if an user has a given permission on a resource or any of its descendants. This functionality should be extended to ignore denials for descendent resources, to enable finding if an user has permissions for at least one of the descendent resource.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)