----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/73854/#review224113 -----------------------------------------------------------
Ship it! Ship It! - bhavik patel On Feb. 22, 2022, 4:22 p.m., Mateen Mansoori wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/73854/ > ----------------------------------------------------------- > > (Updated Feb. 22, 2022, 4:22 p.m.) > > > Review request for ranger, Jayendra Parab, Mehul Parikh, Sailaja Polavarapu, > and Velmurugan Periasamy. > > > Bugs: RANGER-3629 > https://issues.apache.org/jira/browse/RANGER-3629 > > > Repository: ranger > > > Description > ------- > > Handling permissions during upgrades > Since we are moving to a finer grained privilege model, a 100% mapping will > likely not be possible. > > When a user has solr_admin access type privileges on all collections (*), we > are mapping it to: > - admin=*->(QERY and UPDATE) > - collection=*->(QERY and UPDATE) > - schemas=*->(QERY and UPDATE) > - configs=*->(QERY and UPDATE) > > When a user has solr_admin access type on a particular collection > collection_name, we are mapping it to > - collection=collection_name->(QERY and UPDATE) > - schemas=collection_name->(QERY and UPDATE) > > One should verify their permissions after the upgrade. > > > Diffs > ----- > > security-admin/db/mysql/optimized/current/ranger_core_db_mysql.sql > b603f96cd > security-admin/db/oracle/optimized/current/ranger_core_db_oracle.sql > c111a28f6 > security-admin/db/postgres/optimized/current/ranger_core_db_postgres.sql > 854a2c676 > > security-admin/db/sqlanywhere/optimized/current/ranger_core_db_sqlanywhere.sql > b45eace3b > security-admin/db/sqlserver/optimized/current/ranger_core_db_sqlserver.sql > adec99857 > > security-admin/src/main/java/org/apache/ranger/patch/PatchForSolrSvcDefAndPoliciesUpdate_J10055.java > PRE-CREATION > > > Diff: https://reviews.apache.org/r/73854/diff/1/ > > > Testing > ------- > > Verified upgrade on local/cluser - policies are getting migrated as per > description. > > > Thanks, > > Mateen Mansoori > >
