ramackri opened a new pull request, #1094: URL: https://github.com/apache/ranger/pull/1094
## Summary Back-port of master commit [37b6e02](https://github.com/apache/ranger/commit/37b6e02c4d3b989790bbd669b7d5d4366f7f7644) / PR #1073. - Add admin config `ranger.servicedef.ozone.enableActionMatcherInPoliciesCondition` (default `false`). - Runtime overlay in `RangerServiceDefService` for ozone only: admin config is authoritative, adds/removes `action-matches` in served service-def. - Gate ozone plugin action enforcement via `enableActionMatcherInPoliciesCondition` service-def option. - Wire `FF_ENABLE_OZONE_ACTION_MATCHES_CONDITION` in `setup.sh`, `install.properties`, and ranger-docker admin install scripts. - UI fixes for policies referencing conditions absent from served service-def. **Note:** `PatchForOzoneServiceDefPolicyConditionUpdate_J10065` is unchanged — it remains a one-time schema sync only. Feature-flag behavior is runtime-only, matching merged master design. 2.9-specific: did not take master `.env` docker version bumps; `AccessGrantForm.jsx` omitted (not present on ranger-2.9). ## Test plan - [x] `mvn -pl security-admin,plugin-ozone -am test -Dtest=TestRangerServiceDefService,TestRangerOzoneAuthorizer -Dsurefire.failIfNoSpecifiedTests=false` Made with [Cursor](https://cursor.com) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
