----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/72053/#review219446 -----------------------------------------------------------
Ship it! Ship It! - Mehul Parikh On Jan. 29, 2020, 12:42 p.m., Dhaval Shah wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/72053/ > ----------------------------------------------------------- > > (Updated Jan. 29, 2020, 12:42 p.m.) > > > Review request for ranger, Ankita Sinha, Gautam Borad, Mehul Parikh, and > Pradeep Agrawal. > > > Bugs: RANGER-2712 > https://issues.apache.org/jira/browse/RANGER-2712 > > > Repository: ranger > > > Description > ------- > > Currently rangerlookup user has expansive list of privileges. > > This Jira is to restrict that to minimum level without impacting the test > connection/resource lookup functionality. > > > Diffs > ----- > > > agents-common/src/main/java/org/apache/ranger/plugin/service/RangerBaseService.java > 23f5a22 > > hbase-agent/src/main/java/org/apache/ranger/services/hbase/RangerServiceHBase.java > 01b97ea > > hdfs-agent/src/main/java/org/apache/ranger/services/hdfs/RangerServiceHdfs.java > f89d14b > > hive-agent/src/main/java/org/apache/ranger/services/hive/RangerServiceHive.java > dc6ba63 > > knox-agent/src/main/java/org/apache/ranger/services/knox/RangerServiceKnox.java > b72e776 > > plugin-atlas/src/main/java/org/apache/ranger/services/atlas/RangerServiceAtlas.java > 77a626e > > plugin-kafka/src/main/java/org/apache/ranger/services/kafka/RangerServiceKafka.java > cf5da97 > > plugin-kms/src/main/java/org/apache/ranger/services/kms/RangerServiceKMS.java > 96ab449 > > plugin-nifi-registry/src/main/java/org/apache/ranger/services/nifi/registry/RangerServiceNiFiRegistry.java > 21587c7 > > plugin-nifi/src/main/java/org/apache/ranger/services/nifi/RangerServiceNiFi.java > 4f38f42 > > plugin-ozone/src/main/java/org/apache/ranger/services/ozone/RangerServiceOzone.java > 25bffc4 > > plugin-solr/src/main/java/org/apache/ranger/services/solr/RangerServiceSolr.java > 6477af7 > > plugin-yarn/src/main/java/org/apache/ranger/services/yarn/RangerServiceYarn.java > 3e9dfbc > > > Diff: https://reviews.apache.org/r/72053/diff/2/ > > > Testing > ------- > > For lookup user we will be restricting the premission within default policies > of services as follow. > > HDFS => Read, > Hbase => Read, Create > Hive => Read > YARN => submit-app > KNOX => allow > KAFKA => consume > ATLAS => Read-Entity > > > Thanks, > > Dhaval Shah > >
