You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by surekha saharan <su...@apache.org> on 2020/11/12 22:35:09 UTC

servicedef changes to add table level permission

Hi Ranger Devs,

I am trying to add a permission at table level for hive servicedef, I tried
to add "accessTypeRestrictions" on table resource, but the new permission
seems to appear for other resources as well, for example "column".

Could someone point me in the right direction on how to add a permission
for a particular resource.

Thanks much,
Surekha

Re: servicedef changes to add table level permission

Posted by surekha saharan <su...@apache.org>.

Thanks a lot Madhan, will give that a try.

On Thu, Nov 12, 2020 at 4:50 PM Madhan Neethiraj <ma...@apache.org> wrote:

> Surekha,
>
> While creating/editing a policy, UI looks for accessTypeRestrictions
> specified for leaf-resource of the policy. If service-def doesn't list any
> access-types for this resource, UI renders all access-types.
>
> If you would like UI show only a subset of access-types for 'column'
> resource, please list the desired access-types in accessTypeRestrictions
> for 'column' resource.
>
> Hope this helps.
>
> Madhan
>
>
>
> On 11/12/20, 2:35 PM, "surekha saharan" <su...@apache.org> wrote:
>
>     Hi Ranger Devs,
>
>     I am trying to add a permission at table level for hive servicedef, I
> tried
>     to add "accessTypeRestrictions" on table resource, but the new
> permission
>     seems to appear for other resources as well, for example "column".
>
>     Could someone point me in the right direction on how to add a
> permission
>     for a particular resource.
>
>     Thanks much,
>     Surekha
>
>
>

Re: servicedef changes to add table level permission

Posted by Madhan Neethiraj <ma...@apache.org>.

Surekha,

While creating/editing a policy, UI looks for accessTypeRestrictions specified for leaf-resource of the policy. If service-def doesn't list any access-types for this resource, UI renders all access-types.

If you would like UI show only a subset of access-types for 'column' resource, please list the desired access-types in accessTypeRestrictions for 'column' resource.

Hope this helps.

Madhan



On 11/12/20, 2:35 PM, "surekha saharan" <su...@apache.org> wrote:

    Hi Ranger Devs,

    I am trying to add a permission at table level for hive servicedef, I tried
    to add "accessTypeRestrictions" on table resource, but the new permission
    seems to appear for other resources as well, for example "column".

    Could someone point me in the right direction on how to add a permission
    for a particular resource.

    Thanks much,
    Surekha