[jira] [Created] (RANGER-5822) application supplied context attributes should be accessible in expressions

[Madhan Neethiraj (Jira)]

Madhan Neethiraj created RANGER-5822:
----------------------------------------

             Summary: application supplied context attributes should be 
accessible in expressions
                 Key: RANGER-5822
                 URL: https://issues.apache.org/jira/browse/RANGER-5822
             Project: Ranger
          Issue Type: New Feature
          Components: plugins
            Reporter: Madhan Neethiraj
             Fix For: 3.0.0, 2.10


Ranger policy engine makes several evaluation context attributes available in 
expressions, like `REQ.accessType`, `RES._ownerUser` `RES.database`, 
`RES.table`. This should be extended to make attributes supplied by the 
application (like trx_amount, approval_status), so that policies can refer to 
these attributes in making decisions. For example:

 
{noformat}
 CTX_ATTR.trx_amount > 10000 && CTX_ATTR.approval_status != 'approved'{noformat}
 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)