Maksim Myskov created RANGER-3588:
-------------------------------------

             Summary: Ozone plugin: support for key prefix policy
                 Key: RANGER-3588
                 URL: https://issues.apache.org/jira/browse/RANGER-3588
             Project: Ranger
          Issue Type: New Feature
          Components: plugins
            Reporter: Maksim Myskov


At the moment, a policy can be created for volume, bucket or key. It makes it 
impossible to create a policy for subkeys of a given key. For example, I have 
the following keys:
 * myvolume/mybucket/key1
 * myvolume/mybucket/key1/subkey1
 * myvolume/mybucket/key1/subkey2 

If a policy is created for key1, it's not applied for subkey1 and subkey2. 
Apache Ozone native ACLs support key prefixes 
([https://ci-hadoop.apache.org/view/Hadoop%20Ozone/job/ozone-doc-master/lastSuccessfulBuild/artifact/hadoop-hdds/docs/public/security/securityacls.html)]
 but ozone range plugin doesn't.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to