You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@atlas.apache.org by Nixon Rodrigues <ni...@freestoneinfotech.com> on 2020/07/20 14:53:37 UTC

Review Request 72694: ATLAS-3898 :- Authorization - Classifications created by one user should not be visible to other users.

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/72694/
-----------------------------------------------------------

Review request for atlas, Ashutosh Mestry, Jayendra Parab, Madhan Neethiraj, Nikhil Bonte, and Sarath Subramanian.


Bugs: ATLAS-3898
    https://issues.apache.org/jira/browse/ATLAS-3898


Repository: atlas


Description
-------

This patch adds authorization checks for  Classifications read endpoints, so that classification read operation is authorized and classifications created by one user are not be visible to other users with help of ranger authz policies.

Config that enable authorization for Classifications read endpoints

atlas.authorize.read.classification=true


Diffs
-----

  authorization/src/main/java/org/apache/atlas/authorize/AtlasTypeAccessRequest.java 510be3522 
  intg/src/main/java/org/apache/atlas/AtlasConfiguration.java 2c007ca01 
  repository/src/main/java/org/apache/atlas/repository/store/graph/AtlasTypeDefGraphStore.java 79f52700b 
  repository/src/main/java/org/apache/atlas/repository/store/graph/v2/AtlasClassificationDefStoreV2.java 9ffede4e3 


Diff: https://reviews.apache.org/r/72694/diff/1/


Testing
-------

Tested with different users with Ranger policies for types with classification category assigned  {owner} user macro. 

https://builds.apache.org/job/PreCommit-ATLAS-Build-Test/2054/console


Thanks,

Nixon Rodrigues