You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "Arpad Boda (Jira)" <ji...@apache.org> on 2020/03/31 17:38:00 UTC

[jira] [Updated] (NIFIREG-325) support specifying group for 'NiFi Identity' to grant permission to proxy user requests

     [ https://issues.apache.org/jira/browse/NIFIREG-325?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Arpad Boda updated NIFIREG-325:
-------------------------------
    Fix Version/s:     (was: 1.0.0)
                   0.6.0

> support specifying group for 'NiFi Identity' to grant permission to proxy user requests
> ---------------------------------------------------------------------------------------
>
>                 Key: NIFIREG-325
>                 URL: https://issues.apache.org/jira/browse/NIFIREG-325
>             Project: NiFi Registry
>          Issue Type: Improvement
>    Affects Versions: 1.0.0
>            Reporter: Endre Kovacs
>            Assignee: Endre Kovacs
>            Priority: Major
>             Fix For: 0.6.0
>
>          Time Spent: 1h 50m
>  Remaining Estimate: 0h
>
> As documented in
> [https://nifi.apache.org/docs/nifi-registry-docs/html/administration-guide.html#fileaccesspolicyprovider]
> one can specify NiFi node identities to grant permission to proxy user requests and bucket read permission.
>  
> What I'd like to propose is to be able to provider a group name there.: 
> {code:xml}
>    <accessPolicyProvider>
>         <identifier>file-access-policy-provider</identifier>
>         <class>org.a.n.r.s.authorization.file.FileAccessPolicyProvider</class>
>         <property name="Authorizations File">./conf/authorizations.xml</property>
>         <property name="User Group Provider">...</property>
>         <property name="Initial Admin Identity">...</property>
>         <property name="Identity Group Name">my-group</property>
> </accessPolicyProvider>
> {code}
> which in turn would bless that group with the same permissions as described in the admin guide for {code}NiFi Identity{code} (proxying user request and bucket read).
> This feature would be very similar to what  https://issues.apache.org/jira/browse/NIFI-5542 does.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)