You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by Abhay Kulkarni <ak...@hortonworks.com> on 2018/03/08 01:28:12 UTC

Review Request 65961: Improve delegate-admin processing for Ranger policies

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/65961/
-----------------------------------------------------------

Review request for ranger, Madhan Neethiraj and Velmurugan Periasamy.


Summary (updated)
-----------------

Improve delegate-admin processing for Ranger policies


Bugs: RANGER-2009
    https://issues.apache.org/jira/browse/RANGER-2009


Repository: ranger


Description (updated)
-------

Improve delegate-admin processing for Ranger policies. In particular, HDFS policy with delegate-admin flag set and with resource string terminated by '/' is not listed in the policy page even though logged in user is allowed to manage it.


Diffs (updated)
-----

  agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngine.java 189dc2c84 
  agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineImpl.java 29ecfa8ea 
  agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerDefaultPolicyEvaluator.java ffeea2628 
  agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerPolicyEvaluator.java 60b350ee8 
  security-admin/src/main/java/org/apache/ranger/rest/ServiceREST.java cb7ca52da 


Diff: https://reviews.apache.org/r/65961/diff/1/


Testing (updated)
-------

Tested with local VM.


Thanks,

Abhay Kulkarni


Re: Review Request 65961: Improve delegate-admin processing for Ranger policies

Posted by Madhan Neethiraj <ma...@apache.org>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/65961/#review198858
-----------------------------------------------------------


Ship it!




Ship It!

- Madhan Neethiraj


On March 8, 2018, 1:28 a.m., Abhay Kulkarni wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/65961/
> -----------------------------------------------------------
> 
> (Updated March 8, 2018, 1:28 a.m.)
> 
> 
> Review request for ranger, Madhan Neethiraj and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2009
>     https://issues.apache.org/jira/browse/RANGER-2009
> 
> 
> Repository: ranger
> 
> 
> Description
> -------
> 
> Improve delegate-admin processing for Ranger policies. In particular, HDFS policy with delegate-admin flag set and with resource string terminated by '/' is not listed in the policy page even though logged in user is allowed to manage it.
> 
> 
> Diffs
> -----
> 
>   agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngine.java 189dc2c84 
>   agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineImpl.java 29ecfa8ea 
>   agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerDefaultPolicyEvaluator.java ffeea2628 
>   agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerPolicyEvaluator.java 60b350ee8 
>   security-admin/src/main/java/org/apache/ranger/rest/ServiceREST.java cb7ca52da 
> 
> 
> Diff: https://reviews.apache.org/r/65961/diff/1/
> 
> 
> Testing
> -------
> 
> Tested with local VM.
> 
> 
> Thanks,
> 
> Abhay Kulkarni
> 
>