You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "Abhay Kulkarni (JIRA)" <ji...@apache.org> on 2018/03/15 23:02:00 UTC

[jira] [Created] (RANGER-2027) Evaluate grantor's group membership in the plugin for grant/revoke request

Abhay Kulkarni created RANGER-2027:
--------------------------------------

             Summary: Evaluate grantor's group membership in the plugin for grant/revoke request
                 Key: RANGER-2027
                 URL: https://issues.apache.org/jira/browse/RANGER-2027
             Project: Ranger
          Issue Type: Bug
          Components: plugins, Ranger
    Affects Versions: master
            Reporter: Abhay Kulkarni
            Assignee: Abhay Kulkarni
             Fix For: master, 1.1.0


Instead of computing group membership in the ranger-admin, it is better to compute it in the plugin using component's user identity manager and relayed to ranger-admin in the grant/revoke request. Ranger-Admin's user identify manager may be used to compute group membership only as a fallback for backward compatibility.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)