-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/73266/
-----------------------------------------------------------
(Updated April 19, 2021, 2:46 p.m.)
Review request for ranger, Dhaval Rajpara, Dhaval Shah, Dineshkumar Yadav,
Gautam Borad, Jayendra Parab, Kishor Gollapalliwar, Mateen Mansoori, Mehul
Parikh, Pradeep Agrawal, and Ramesh Mani.
Bugs: RANGER-3229
https://issues.apache.org/jira/browse/RANGER-3229
Repository: ranger
Description
-------
When creating a policy for delegation token, only 'describe' permission is
allowed by UI.
But the default policy created for "all - delegationtoken" contains a policy
item for rangerlookup user with "consume".
Diffs
-----
plugin-kafka/src/main/java/org/apache/ranger/services/kafka/RangerServiceKafka.java
4e7163a02
Diff: https://reviews.apache.org/r/73266/diff/2/
Testing
-------
Testing summary:
Policy Name: all - delegationtoken
Allow Condition permissions for rangerlookup user: describe
Policy Name: all - transactionalid
Allow Condition permissions for rangerlookup user: describe
Policy Name: all - cluster
Allow Condition permissions for rangerlookup user: describe
Thanks,
Bhagyashri Kokate