[
https://issues.apache.org/jira/browse/RANGER-5759?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dineshkumar Yadav reassigned RANGER-5759:
-----------------------------------------
Assignee: Eoin McDonnell
> Add notification-topic resource and post-notification privilege to Atlas
> service-def in Ranger
> ----------------------------------------------------------------------------------------------
>
> Key: RANGER-5759
> URL: https://issues.apache.org/jira/browse/RANGER-5759
> Project: Ranger
> Issue Type: Improvement
> Components: Ranger
> Reporter: Paresh Devalia
> Assignee: Eoin McDonnell
> Priority: Major
>
> Atlas REST notification API accepts hook messages via:
> POST /api/atlas/v2/notification/topic/\{topicName}
> These messages can create/update/delete Atlas entities. This endpoint must be
> authorized through Ranger.
> *Introduce topic-scoped authorization in Atlas + Ranger:*
> * New Atlas resource-type: notification-topic
> * New privilege(access): post-notification
> *Ranger changes*
> * Update ranger-servicedef-atlas.json:
> * Add resource: notification-topic
> * Add access type: post-notification
> *Acceptance criteria*
> # Ranger admin can create policy on notification-topic (e.g. ATLAS_HOOK)
> with post-notification access
> # Authorized user can POST to allowed topic
> # Unauthorized user gets 403
> # Existing deployments upgraded via patch
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
