-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/73793/
-----------------------------------------------------------
Review request for ranger, Abhay Kulkarni, Mehul Parikh, Pradeep Agrawal,
Ramesh Mani, and Velmurugan Periasamy.
Bugs: RANGER-3403
https://issues.apache.org/jira/browse/RANGER-3403
Repository: ranger
Description
-------
1. Introduced new usersync configuration to treat service users like
"rangerusersync", "admin", "rangertagsync" that require "ROLE_SYS_ADMIN"
privileges.
2. Fixed issue where removing a role assignment rule from usersync
configuration is not updating the role of the affected users.
3. Also fixed an issue where the role (other than “ROLE_USER”) assigned to an
external user manually from Ranger UI, is not reset automatically when usersync
is restarted.
Diffs
-----
security-admin/src/main/java/org/apache/ranger/biz/XUserMgr.java 0eb582c8e
security-admin/src/main/java/org/apache/ranger/db/XXPortalUserDao.java
d383cf596
security-admin/src/main/resources/META-INF/jpa_named_queries.xml c19ec495e
security-admin/src/test/java/org/apache/ranger/biz/TestXUserMgr.java
945bba48d
ugsync-util/src/main/java/org/apache/ranger/ugsyncutil/model/UsersGroupRoleAssignments.java
ce0b9dd8b
ugsync/src/main/java/org/apache/ranger/unixusersync/config/UserGroupSyncConfig.java
ea6b47cd0
ugsync/src/main/java/org/apache/ranger/unixusersync/process/PolicyMgrUserGroupBuilder.java
60445043f
Diff: https://reviews.apache.org/r/73793/diff/1/
Testing
-------
1. Verified functional test cases with new configuration and existing role
assignment configuration.
2. Verified few regression test cases with default options
3. Verified all the existing unit test cases pass.
Thanks,
Sailaja Polavarapu
