[
https://issues.apache.org/jira/browse/RANGER-4970?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17896731#comment-17896731
]
Madhan Neethiraj commented on RANGER-4970:
------------------------------------------
{quote}Reopening this as its causing junit test failures:
{quote}
[~pradeep] - can you please add details of the environment where test failures
are seen? For reference, no failures are seen in the latest build in Apache:
[https://ci-builds.apache.org/job/Ranger/job/ranger-master-mvn-build/org.apache.ranger$ranger-plugins-common/1274/testReport/.|https://ci-builds.apache.org/job/Ranger/job/ranger-master-mvn-build/org.apache.ranger$ranger-plugins-common/1274/testReport/]
> Condition to support validity schedule
> --------------------------------------
>
> Key: RANGER-4970
> URL: https://issues.apache.org/jira/browse/RANGER-4970
> Project: Ranger
> Issue Type: Improvement
> Components: admin, plugins
> Reporter: Madhan Neethiraj
> Assignee: Madhan Neethiraj
> Priority: Major
> Fix For: 3.0.0, 2.6.0
>
> Attachments: RANGER-4970.patch
>
>
> Ranger policy model currently supports validity schedule at the policy level,
> which allows a policy author to allow/deny permissions for specific time
> periods. This should be extended at policy-item level, so that permissions
> call be allowed/denied for individual principals for a specific time periods.
> RANGER-3815 asked for this enhancement, which was addressed with introduction
> of macros. However, supporting validity schedule, similar to the one at
> policy level, will make it consistent.
>
> Custom conditions supported by Ranger policy model can be extended to provide
> this functionality, by adding a condition that takes validity schedule as the
> input. Policy UI can be enhanced to provide the same experience for policy
> items as at the policy level.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
