You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by Madhan Neethiraj <ma...@apache.org> on 2017/04/26 21:07:36 UTC

Re: Review Request 57441: Turn Ranger deny policy & except condition blocks ON by default

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57441/#review173099
-----------------------------------------------------------


Ship it!




Ship It!

- Madhan Neethiraj


On March 9, 2017, 2:28 a.m., Abhay Kulkarni wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/57441/
> -----------------------------------------------------------
> 
> (Updated March 9, 2017, 2:28 a.m.)
> 
> 
> Review request for ranger, Madhan Neethiraj and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-1436
>     https://issues.apache.org/jira/browse/RANGER-1436
> 
> 
> Repository: ranger
> 
> 
> Description
> -------
> 
> Currently Ranger admins have to do a service def update to turn on Deny Conditions block and Deny/Allow Except conditions in their Ranger install for resource based policies. But these are enabled by default for tag based policies. This change enforces consistency and turns this feature consistently ON by default for both resource and tag based policies.
> 
> 
> Diffs
> -----
> 
>   agents-common/src/main/java/org/apache/ranger/plugin/model/RangerServiceDef.java 7b3bd95 
>   agents-common/src/main/java/org/apache/ranger/plugin/util/ServiceDefUtil.java dbdc935 
>   security-admin/src/main/java/org/apache/ranger/service/RangerServiceDefService.java 53b12d8 
> 
> 
> Diff: https://reviews.apache.org/r/57441/diff/1/
> 
> 
> Testing
> -------
> 
> Tested with local VM.
> 
> 
> Thanks,
> 
> Abhay Kulkarni
> 
>