You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Sanket Shelar (Jira)" <ji...@apache.org> on 2025/12/17 05:29:00 UTC
[jira] [Created] (RANGER-5425) Grant policies should show created by and updated by as users running the cmd instead of service users.
Sanket Shelar created RANGER-5425:
-------------------------------------
Summary: Grant policies should show created by and updated by as users running the cmd instead of service users.
Key: RANGER-5425
URL: https://issues.apache.org/jira/browse/RANGER-5425
Project: Ranger
Issue Type: Improvement
Components: Ranger
Reporter: Sanket Shelar
Assignee: Sanket Shelar
Ranger audits are stored in Solr for ~90 days. Beyond that, attribution of who created a policy is lost.
Currently when we run grant from beeline/ impala-shell/ hue the policy created would have created by/updated by as the service user instead of the user running the query.
Steps to reproduce.
Create user testuser and create policy to provide access to user for table mydb.mytable.
Kinit using testuser and run below cmds.
# CREATE DATABASE mydb;
# USE mydb;
# CREATE TABLE mytable ( id INT, name STRING, created_at TIMESTAMP);
# Execute a SQL GRANT on a table via Impala: # GRANT SELECT ON TABLE mydb.mytable TO GROUP `admin`;
# go to Ranger
# find the Policy that has been created by the Policy. it would have created and updated by as service user.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)