You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by Nikhil P <np...@gmail.com> on 2018/11/01 11:06:14 UTC

Review Request 69228: Allow service admin and delegated admin user to view list of users and groups though they have 'USER' role

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/69228/
-----------------------------------------------------------

Review request for ranger, Gautam Borad, Abhay Kulkarni, Madhan Neethiraj, Nitin Galave, Pradeep Agrawal, Ramesh Mani, Selvamohan Neethiraj, Sailaja Polavarapu, and Velmurugan Periasamy.


Bugs: RANGER-2273
    https://issues.apache.org/jira/browse/RANGER-2273


Repository: ranger


Description
-------

Due to RANGER-2208 users list access is too restricted to the users who are having USER role. To create policies delegated admin and service admin need access to users and groups information.


Diffs
-----

  security-admin/src/main/java/org/apache/ranger/biz/ServiceDBStore.java b40d4f0 
  security-admin/src/main/java/org/apache/ranger/rest/XUserREST.java b5c6e9c 
  security-admin/src/main/java/org/apache/ranger/security/context/RangerAPIList.java 4a6a769 
  security-admin/src/main/webapp/scripts/views/policies/PermissionList.js 2b996b0 


Diff: https://reviews.apache.org/r/69228/diff/1/


Testing
-------

1.tested on local VM.


Thanks,

Nikhil P


Re: Review Request 69228: Allow service admin and delegated admin user to view list of users and groups though they have 'USER' role

Posted by Velmurugan Periasamy <vp...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/69228/#review210283
-----------------------------------------------------------


Ship it!




Ship It!

- Velmurugan Periasamy


On Nov. 2, 2018, 1:31 p.m., Nikhil P wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/69228/
> -----------------------------------------------------------
> 
> (Updated Nov. 2, 2018, 1:31 p.m.)
> 
> 
> Review request for ranger, Gautam Borad, Abhay Kulkarni, Madhan Neethiraj, Nitin Galave, Pradeep Agrawal, Ramesh Mani, Selvamohan Neethiraj, Sailaja Polavarapu, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2273
>     https://issues.apache.org/jira/browse/RANGER-2273
> 
> 
> Repository: ranger
> 
> 
> Description
> -------
> 
> Due to RANGER-2208 users list access is too restricted to the users who are having USER role. To create policies delegated admin and service admin need access to users and groups information.
> 
> 
> Diffs
> -----
> 
>   security-admin/src/main/java/org/apache/ranger/biz/ServiceDBStore.java b40d4f027 
>   security-admin/src/main/java/org/apache/ranger/biz/XUserMgr.java febf2218d 
>   security-admin/src/main/java/org/apache/ranger/rest/XUserREST.java b5c6e9cc5 
>   security-admin/src/main/java/org/apache/ranger/security/context/RangerAPIList.java 4a6a76998 
>   security-admin/src/main/webapp/scripts/views/policies/PermissionList.js 2b996b0e1 
>   security-admin/src/main/webapp/scripts/views/reports/UserAccessLayout.js d5bad70df 
> 
> 
> Diff: https://reviews.apache.org/r/69228/diff/3/
> 
> 
> Testing
> -------
> 
> 1.tested on local VM.
> 
> 
> Thanks,
> 
> Nikhil P
> 
>


Re: Review Request 69228: Allow service admin and delegated admin user to view list of users and groups though they have 'USER' role

Posted by Pradeep Agrawal <pr...@gmail.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/69228/#review210312
-----------------------------------------------------------


Ship it!




Ship It!

- Pradeep Agrawal


On Nov. 2, 2018, 1:31 p.m., Nikhil P wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/69228/
> -----------------------------------------------------------
> 
> (Updated Nov. 2, 2018, 1:31 p.m.)
> 
> 
> Review request for ranger, Gautam Borad, Abhay Kulkarni, Madhan Neethiraj, Nitin Galave, Pradeep Agrawal, Ramesh Mani, Selvamohan Neethiraj, Sailaja Polavarapu, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2273
>     https://issues.apache.org/jira/browse/RANGER-2273
> 
> 
> Repository: ranger
> 
> 
> Description
> -------
> 
> Due to RANGER-2208 users list access is too restricted to the users who are having USER role. To create policies delegated admin and service admin need access to users and groups information.
> 
> 
> Diffs
> -----
> 
>   security-admin/src/main/java/org/apache/ranger/biz/ServiceDBStore.java b40d4f027 
>   security-admin/src/main/java/org/apache/ranger/biz/XUserMgr.java febf2218d 
>   security-admin/src/main/java/org/apache/ranger/rest/XUserREST.java b5c6e9cc5 
>   security-admin/src/main/java/org/apache/ranger/security/context/RangerAPIList.java 4a6a76998 
>   security-admin/src/main/webapp/scripts/views/policies/PermissionList.js 2b996b0e1 
>   security-admin/src/main/webapp/scripts/views/reports/UserAccessLayout.js d5bad70df 
> 
> 
> Diff: https://reviews.apache.org/r/69228/diff/3/
> 
> 
> Testing
> -------
> 
> 1.tested on local VM.
> 
> 
> Thanks,
> 
> Nikhil P
> 
>


Re: Review Request 69228: Allow service admin and delegated admin user to view list of users and groups though they have 'USER' role

Posted by Nikhil P <np...@gmail.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/69228/
-----------------------------------------------------------

(Updated Nov. 2, 2018, 7:01 p.m.)


Review request for ranger, Gautam Borad, Abhay Kulkarni, Madhan Neethiraj, Nitin Galave, Pradeep Agrawal, Ramesh Mani, Selvamohan Neethiraj, Sailaja Polavarapu, and Velmurugan Periasamy.


Bugs: RANGER-2273
    https://issues.apache.org/jira/browse/RANGER-2273


Repository: ranger


Description
-------

Due to RANGER-2208 users list access is too restricted to the users who are having USER role. To create policies delegated admin and service admin need access to users and groups information.


Diffs (updated)
-----

  security-admin/src/main/java/org/apache/ranger/biz/ServiceDBStore.java b40d4f027 
  security-admin/src/main/java/org/apache/ranger/biz/XUserMgr.java febf2218d 
  security-admin/src/main/java/org/apache/ranger/rest/XUserREST.java b5c6e9cc5 
  security-admin/src/main/java/org/apache/ranger/security/context/RangerAPIList.java 4a6a76998 
  security-admin/src/main/webapp/scripts/views/policies/PermissionList.js 2b996b0e1 
  security-admin/src/main/webapp/scripts/views/reports/UserAccessLayout.js d5bad70df 


Diff: https://reviews.apache.org/r/69228/diff/3/

Changes: https://reviews.apache.org/r/69228/diff/2-3/


Testing
-------

1.tested on local VM.


Thanks,

Nikhil P