Sanket Shelar created RANGER-5425:
-------------------------------------
Summary: Grant policies should show created by and updated by as
users running the cmd instead of service users.
Key: RANGER-5425
URL: https://issues.apache.org/jira/browse/RANGER-5425
Project: Ranger
Issue Type: Improvement
Components: Ranger
Reporter: Sanket Shelar
Assignee: Sanket Shelar
Ranger audits are stored in Solr for ~90 days. Beyond that, attribution of who
created a policy is lost.
Currently when we run grant from beeline/ impala-shell/ hue the policy created
would have created by/updated by as the service user instead of the user
running the query.
Steps to reproduce.
Create user testuser and create policy to provide access to user for table
mydb.mytable.
Kinit using testuser and run below cmds.
# CREATE DATABASE mydb;
# USE mydb;
# CREATE TABLE mytable ( id INT, name STRING, created_at TIMESTAMP);
# Execute a SQL GRANT on a table via Impala: # GRANT SELECT ON TABLE
mydb.mytable TO GROUP `admin`;
# go to Ranger
# find the Policy that has been created by the Policy. it would have created
and updated by as service user.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
