-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/73793/
-----------------------------------------------------------
(Updated Jan. 26, 2022, 11:53 p.m.)
Review request for ranger, Abhay Kulkarni, Mehul Parikh, Pradeep Agrawal,
Ramesh Mani, and Velmurugan Periasamy.
Changes
-------
Incorporated review comments and fixed one regression case where order of roles
is not honored properly
Bugs: RANGER-3403
https://issues.apache.org/jira/browse/RANGER-3403
Repository: ranger
Description
-------
1. Introduced new usersync configuration to treat service users like
"rangerusersync", "admin", "rangertagsync" that require "ROLE_SYS_ADMIN"
privileges.
2. Fixed issue where removing a role assignment rule from usersync
configuration is not updating the role of the affected users.
3. Also fixed an issue where the role (other than “ROLE_USER”) assigned to an
external user manually from Ranger UI, is not reset automatically when usersync
is restarted.
Diffs (updated)
-----
security-admin/src/main/java/org/apache/ranger/biz/XUserMgr.java 1c2ef52ef
security-admin/src/main/java/org/apache/ranger/db/XXPortalUserDao.java
d383cf596
security-admin/src/main/resources/META-INF/jpa_named_queries.xml d25fdc020
security-admin/src/test/java/org/apache/ranger/biz/TestXUserMgr.java
eb2d6b383
ugsync-util/src/main/java/org/apache/ranger/ugsyncutil/model/UsersGroupRoleAssignments.java
ce0b9dd8b
ugsync/src/main/java/org/apache/ranger/unixusersync/config/UserGroupSyncConfig.java
47beecf21
ugsync/src/main/java/org/apache/ranger/unixusersync/process/PolicyMgrUserGroupBuilder.java
693d90894
Diff: https://reviews.apache.org/r/73793/diff/2/
Changes: https://reviews.apache.org/r/73793/diff/1-2/
Testing
-------
1. Verified functional test cases with new configuration and existing role
assignment configuration.
2. Verified few regression test cases with default options
3. Verified all the existing unit test cases pass.
Thanks,
Sailaja Polavarapu
