theoryxu opened a new pull request, #5629: URL: https://github.com/apache/gravitino/pull/5629
### What changes were proposed in this pull request? Many clients and users have used Ranger for a while. Gravitino should be compatible with these cases. There are some principles Gravitino needs to follow when it pushes down policies: 1. Gravitino can't modify existing policy names because users may have their own name rules. 2. Gravitino and users could share the same policy and not disturb each other for the same resource. For the target, this PR includes the following changes: 1. `wildcardSearchPolies` removes the `MANAGED_BY_GRAVITINO` filter. 2. Gravitino managed role name add the prefix `GRAVITINO_`. 3. Using Gravitino Managed role to identify and operate policy items. Despite doing these, users should be cautious about directly managing the ranger policy. There are some restricts: 1. Don't directly rename Gravitino-managed policies. 2. Don't directly modify policy items that have Gravitino Managed roles. ### Why are the changes needed? Fix: #5336 ### Does this PR introduce _any_ user-facing change? N/A ### How was this patch tested? Added ITs -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
