[
https://issues.apache.org/jira/browse/RANGER-4061?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ramesh Mani updated RANGER-4061:
--------------------------------
Description:
Current Grant and Revoke functionality in Apache Ranger Supports only request
to create Allowed Permission. But there are services like Kafka where the ACL
grant can have clauses like allow certain users / Groups/ hosts except users
/Groups/ hosts.
For this enhance the current Ranger Grant Revoke Api to include a new member to
hold the “AllowException” policyItem which can be added by the services which
supports this.
By this enhancement Grant Revoke Api will add the “Allow Exception” policyItem
for the policy that will be created.
was:
Current Grant and Revoke functionally in Apache Ranger Supports only request to
create Allowed Permission. But there are services like Kafka where the ACL
grant can have clauses like allow certain users / Groups/ hosts except users
/Groups/ hosts.
For this enhance the current Ranger Grant Revoke Api to include a new member to
hold the “AllowException” policyItem which can be added by the services which
supports this.
By this enhancement Grant Revoke Api will add the “Allow Exception” policyItem
for the policy that will be created.
> Grant and Revoke Request should support Allow Exception
> --------------------------------------------------------
>
> Key: RANGER-4061
> URL: https://issues.apache.org/jira/browse/RANGER-4061
> Project: Ranger
> Issue Type: Improvement
> Components: Ranger
> Affects Versions: 3.0.0
> Reporter: Ramesh Mani
> Assignee: Ramesh Mani
> Priority: Major
>
> Current Grant and Revoke functionality in Apache Ranger Supports only request
> to create Allowed Permission. But there are services like Kafka where the ACL
> grant can have clauses like allow certain users / Groups/ hosts except users
> /Groups/ hosts.
> For this enhance the current Ranger Grant Revoke Api to include a new member
> to hold the “AllowException” policyItem which can be added by the services
> which supports this.
> By this enhancement Grant Revoke Api will add the “Allow Exception”
> policyItem for the policy that will be created.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
