-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/72152/
-----------------------------------------------------------
Review request for ranger, deepak sharma, Gautam Borad, Abhay Kulkarni, Mehul
Parikh, Mugdha Varadkar, Pradeep Agrawal, Ramesh Mani, Sailaja Polavarapu,
Vishal Suvagia, and Velmurugan Periasamy.
Bugs: RANGER-2734
https://issues.apache.org/jira/browse/RANGER-2734
Repository: ranger
Description
-------
- add new resources 'entity-label' and 'entity-namespace' to Atlas service-def
- added new operations 'entity-add-label', 'entity-remove-label',
'entity-update-namespace' and 'admin-purge' to Atlas service-def
- updated Ranger authorizer for Atlas to handle new operations and resources
- TODO: patch to update existing deployments for the changes in Atlas
service-def
Diffs
-----
agents-common/src/main/resources/service-defs/ranger-servicedef-atlas.json
7a6f0b936
plugin-atlas/src/main/java/org/apache/ranger/authorization/atlas/authorizer/RangerAtlasAuthorizer.java
7f841d469
plugin-atlas/src/main/java/org/apache/ranger/services/atlas/RangerServiceAtlas.java
e6b8456a1
Diff: https://reviews.apache.org/r/72152/diff/1/
Testing
-------
- verified that Ranger UI:
shows 2 new leaf-level resources for Atlas policies: entity-label,
entity-namespace
shows permissions 'entity-add-label' and 'entity-remove-label' when resource
selected is 'entity-label'
shows permissions 'entity-update-namespace' when resource selected is
'entity-namespace'
- verified that Ranger authorizer for Atlas enforces policies for labels and
namespaces
- verified that Ranger audit logs record operations on labels and namespaces
Thanks,
Madhan Neethiraj
