[jira] [Created] (RANGER-3150) Retrieve the list of privileges granted to a principal

["Fang-Yu Rao (Jira)" <ji...@apache.org>]

Fang-Yu Rao created RANGER-3150:
-----------------------------------

             Summary: Retrieve the list of privileges granted to a principal
                 Key: RANGER-3150
                 URL: https://issues.apache.org/jira/browse/RANGER-3150
             Project: Ranger
          Issue Type: Improvement
          Components: plugins, Ranger
            Reporter: Fang-Yu Rao


Right now there is no straightforward way provided by {{RangerBasePlugin}} that allows Impala to retrieve the list of privileges granted to a principal, which could be a user, a group, or a role. It looks like the resources always need to be explicitly specified in a {{RangerAccessRequest}} in order for a plugin user to retrieve from a {{RangerResourceACLs}} the privileges granted to a principal. It would be nice if there is no such requirement, i.e., having to specify the resources.

Refer to [RangerImpaladAuthorizationManager#getPrivileges()|https://github.infra.cloudera.com/CDH/Impala/blob/CDH-7.1-maint/fe/src/main/java/org/apache/impala/authorization/ranger/RangerImpaladAuthorizationManager.java#L340-L403] for how Impala retrieves the privileges granted to a principal with respect to the specified resources.




--
This message was sent by Atlassian Jira
(v8.3.4#803005)