You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "Abhishek Kumar (Jira)" <ji...@apache.org> on 2025/01/27 01:18:00 UTC

[jira] [Commented] (RANGER-5001) Ignore denials for descendent resources

    [ https://issues.apache.org/jira/browse/RANGER-5001?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17921253#comment-17921253 ] 

Abhishek Kumar commented on RANGER-5001:
----------------------------------------

Merged in [ranger-2.6|https://github.com/apache/ranger/commit/174b0ca]

> Ignore denials for descendent resources
> ---------------------------------------
>
>                 Key: RANGER-5001
>                 URL: https://issues.apache.org/jira/browse/RANGER-5001
>             Project: Ranger
>          Issue Type: Improvement
>          Components: Ranger
>            Reporter: Abhay Kulkarni
>            Assignee: Fateh Singh
>            Priority: Major
>             Fix For: 3.0.0, 2.6.0
>
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> Ranger policy engine currently supports finding if an user has a given permission on a resource or any of its descendants. This functionality should be extended to ignore denials for descendent resources, to enable finding if an user has permissions for at least one of the descendent resource.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)