Madhan Neethiraj created RANGER-3676:
----------------------------------------

             Summary: tag-based policies don't recognize {OWNER} in users as 
resource owners  
                 Key: RANGER-3676
                 URL: https://issues.apache.org/jira/browse/RANGER-3676
             Project: Ranger
          Issue Type: Bug
          Components: plugins
            Reporter: Madhan Neethiraj
            Assignee: Madhan Neethiraj


Ranger policies allow setting up permissions for resource-owners by using 
\{OWNER} as the username in policies. Currently this works only for 
resource-based policies, and not for tag-based policies. Recognizing \{OWNER} 
in tag-based policies can help address wider authorization needs, like:
{noformat}
tag:           SENSITIVE
users:         {OWNER}, groups: [ data-admins ]
permissions:   [ select ]
isDenyAllElse: true{noformat}
 



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to