> On 三月 5, 2018, 11:35 a.m., Colm O hEigeartaigh wrote: > > Could you put together some instructions as to how to test this with a > > sample deployment?
Please refer the following docs and steps: 1. Kylin Installation Guide: http://kylin.apache.org/docs23/install/index.html 2.Kylin Enable LDAP authentication: http://kylin.apache.org/docs23/howto/howto_ldap_and_sso.html 3.Kylin Project Level ACL: http://kylin.apache.org/docs23/tutorial/project_level_acl.html 4.Ranger Kylin Plugin Installation Guide: https://cwiki.apache.org/confluence/display/RANGER/Kylin+Plugin 5.Create Kylin Service in RangerAdmin Web UI: Service Name : kylindev Username : user1 Password : yourPassword Kylin URL : http://IP:7070 Configure the administrator user "user1" in LDAP for Kylin and click Test Connection success. 6.Create Kylin Policy in kylindev for Kylin user "user2": Policy Name : access2LearnKylin Kylin Project : learn_kylin Select User : user2 Permissions : QUERY OPERATION MANAGEMENT ADMIN Configure the non-administrator user "user2" in LDAP for Kylin, User "user2" login Kylin WebUI could access to Kylin project "learn_kylin", and do some actions on cubes of project "learn_kylin" with different permissions. 7.Delete Kylin Policy "access2LearnKylin", then user "user2" could not access to project "learn_kylin" in Kylin WebUI. - Qiang ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/61021/#review198621 ----------------------------------------------------------- On 三月 5, 2018, 8:23 a.m., Qiang Zhang wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/61021/ > ----------------------------------------------------------- > > (Updated 三月 5, 2018, 8:23 a.m.) > > > Review request for ranger, Ankita Sinha, Don Bosco Durai, Colm O > hEigeartaigh, Gautam Borad, Madhan Neethiraj, pengjianhua, Ramesh Mani, > Selvamohan Neethiraj, sam rome, and Velmurugan Periasamy. > > > Bugs: RANGER-1672 > https://issues.apache.org/jira/browse/RANGER-1672 > > > Repository: ranger > > > Description > ------- > > Ranger supports plugin to enable, monitor and manage apache kylin > > > Diffs > ----- > > agents-common/scripts/enable-agent.sh 7033f79 > > agents-common/src/main/java/org/apache/ranger/plugin/store/EmbeddedServiceDefsUtil.java > 899bcac > > agents-common/src/main/java/org/apache/ranger/plugin/util/PasswordUtils.java > 6ba42d4 > agents-common/src/main/resources/service-defs/ranger-servicedef-kylin.json > PRE-CREATION > plugin-kylin/.gitignore PRE-CREATION > plugin-kylin/conf/ranger-kylin-audit-changes.cfg PRE-CREATION > plugin-kylin/conf/ranger-kylin-audit.xml PRE-CREATION > plugin-kylin/conf/ranger-kylin-security-changes.cfg PRE-CREATION > plugin-kylin/conf/ranger-kylin-security.xml PRE-CREATION > plugin-kylin/conf/ranger-policymgr-ssl-changes.cfg PRE-CREATION > plugin-kylin/conf/ranger-policymgr-ssl.xml PRE-CREATION > plugin-kylin/pom.xml PRE-CREATION > plugin-kylin/scripts/install.properties PRE-CREATION > > plugin-kylin/src/main/java/org/apache/ranger/authorization/kylin/authorizer/RangerKylinAuthorizer.java > PRE-CREATION > > plugin-kylin/src/main/java/org/apache/ranger/services/kylin/RangerServiceKylin.java > PRE-CREATION > > plugin-kylin/src/main/java/org/apache/ranger/services/kylin/client/KylinClient.java > PRE-CREATION > > plugin-kylin/src/main/java/org/apache/ranger/services/kylin/client/KylinResourceMgr.java > PRE-CREATION > > plugin-kylin/src/main/java/org/apache/ranger/services/kylin/client/json/model/KylinProjectResponse.java > PRE-CREATION > pom.xml 08593aa > ranger-kylin-plugin-shim/.gitignore PRE-CREATION > ranger-kylin-plugin-shim/pom.xml PRE-CREATION > > ranger-kylin-plugin-shim/src/main/java/org/apache/ranger/authorization/kylin/authorizer/RangerKylinAuthorizer.java > PRE-CREATION > src/main/assembly/admin-web.xml 29d728a > src/main/assembly/plugin-kylin.xml PRE-CREATION > > > Diff: https://reviews.apache.org/r/61021/diff/4/ > > > Testing > ------- > > Tested > > > Thanks, > > Qiang Zhang > >
