mneethiraj commented on PR #127: URL: https://github.com/apache/ranger/pull/127#issuecomment-3736658754
Updating service-def on every startup can cause any changes done via REST API calls to be lost. This is not desirable. In addition, updates to a service-def often would require changes to default policies, for example: - addition of an access-type would require updates to default policies created earlier to include the new access-type - addition of a new resource would require creation of a new default policy, to grant service user access to the new resource That said, automatic service-def updates could be useful in an environment where the only way to update a service-def is via Ranger admin upgrade (that embeds updated service-defs). Introducing an option in service-def `auto-update-on-admin-startup` could help avoid surprises. If this is critical, please reopen the PR, rebase and introduce the suggested option. Thanks. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
