You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ranger.apache.org by ve...@apache.org on 2015/11/13 18:57:38 UTC

incubator-ranger git commit: RANGER-680 : Default policies for KMS repo

Repository: incubator-ranger
Updated Branches:
  refs/heads/master 427ed4a2b -> 18e639786


RANGER-680 : Default policies for KMS repo

Signed-off-by: Velmurugan Periasamy <ve...@apache.org>


Project: http://git-wip-us.apache.org/repos/asf/incubator-ranger/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-ranger/commit/18e63978
Tree: http://git-wip-us.apache.org/repos/asf/incubator-ranger/tree/18e63978
Diff: http://git-wip-us.apache.org/repos/asf/incubator-ranger/diff/18e63978

Branch: refs/heads/master
Commit: 18e63978666eba70b67519501cc7871b3a8c79d7
Parents: 427ed4a
Author: Gautam Borad <gb...@gmail.com>
Authored: Tue Oct 6 13:06:46 2015 +0530
Committer: Velmurugan Periasamy <ve...@apache.org>
Committed: Fri Nov 13 12:57:25 2015 -0500

----------------------------------------------------------------------
 .../src/main/java/org/apache/ranger/biz/ServiceDBStore.java  | 8 --------
 1 file changed, 8 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/incubator-ranger/blob/18e63978/security-admin/src/main/java/org/apache/ranger/biz/ServiceDBStore.java
----------------------------------------------------------------------
diff --git a/security-admin/src/main/java/org/apache/ranger/biz/ServiceDBStore.java b/security-admin/src/main/java/org/apache/ranger/biz/ServiceDBStore.java
index ced2f51..0ee3595 100644
--- a/security-admin/src/main/java/org/apache/ranger/biz/ServiceDBStore.java
+++ b/security-admin/src/main/java/org/apache/ranger/biz/ServiceDBStore.java
@@ -1928,14 +1928,6 @@ public class ServiceDBStore extends AbstractServiceStore {
 			users.add(vXUser.getName());
 			policyItem.setUsers(users);
 
-			// Default policy for KMS should grant all access to 'public'
-			long serviceType = createdService.getType() == null ? -1 : createdService.getType();
-			if(serviceType == EmbeddedServiceDefsUtil.instance().getKmsServiceDefId()) {
-				List<String> groups = new ArrayList<String>();
-				groups.add(RangerConstants.GROUP_PUBLIC);
-				policyItem.setGroups(groups);
-			}
-			
 			List<XXAccessTypeDef> accessTypeDefs = daoMgr.getXXAccessTypeDef().findByServiceDefId(createdService.getType());
 			List<RangerPolicyItemAccess> accesses = new ArrayList<RangerPolicyItemAccess>();
 			for(XXAccessTypeDef accessTypeDef : accessTypeDefs) {