-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71090/
-----------------------------------------------------------
Review request for ranger, Madhan Neethiraj and Velmurugan Periasamy.
Bugs: RANGER-2507
https://issues.apache.org/jira/browse/RANGER-2507
Repository: ranger
Description
-------
Ranger policy model needs to be enhanced to support a feature that implicitly
denies access to the resource if the policy does not allow access for requested
operation.
Updated Ranger Policy model to support a boolean flag "isDenyAllElse", and
implemented the semantics as described in the policy engine.
Diffs
-----
agents-common/src/main/java/org/apache/ranger/plugin/errors/ValidationErrorCode.java
aa87c816d
agents-common/src/main/java/org/apache/ranger/plugin/model/RangerPolicy.java
c228da5d9
agents-common/src/main/java/org/apache/ranger/plugin/model/validation/RangerPolicyValidator.java
412d9e161
agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerAbstractPolicyEvaluator.java
bc459e396
agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerDefaultPolicyEvaluator.java
a0283c422
agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerOptimizedPolicyEvaluator.java
7eb15d8f5
agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerPolicyEvaluator.java
5174f4e4b
agents-common/src/test/resources/policyengine/test_aclprovider_default.json
7c7004ab5
agents-common/src/test/resources/policyengine/test_policyengine_hdfs.json
3833ba13a
Diff: https://reviews.apache.org/r/71090/diff/1/
Testing
-------
Developed unit tests specific to this feature. Passed all unit tests
successfully.
Thanks,
Abhay Kulkarni
