-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/31935/
-----------------------------------------------------------
(Updated March 11, 2015, 2:16 p.m.)
Review request for ranger, Don Bosco Durai, Madhan Neethiraj, Ramesh Mani,
Selvamohan Neethiraj, and Velmurugan Periasamy.
Bugs: RANGER-302
https://issues.apache.org/jira/browse/RANGER-302
Repository: ranger
Description
-------
Need to provide separation of DBA/non-DBA part in installation script.
The current setup.sh script that comes with Ranger does not allow for
separating out DBA duties (creating schema, tablespace, etc) that require DBA
role from things that can be done as the ranger db user (non-DBA).
This may cause an issue because security policy may not allow them to access
the DB as DBA from the Ranger host.
Diffs
-----
security-admin/db/mysql/patches/011-auditcolumnssize.sql PRE-CREATION
security-admin/db/mysql/xa_audit_db.sql dba98ce
security-admin/db/oracle/patches/009-updated_schema.sql 30407c3
security-admin/db/oracle/patches/010-users-and-groups-visibility.sql 38dc8e4
security-admin/db/oracle/patches/011-auditcolumnssize.sql PRE-CREATION
security-admin/db/oracle/xa_audit_db_oracle.sql 3092055
security-admin/db/postgres/xa_audit_db_postgres.sql 035d885
security-admin/db/postgres/xa_core_db_postgres.sql d4e0020
security-admin/db/sqlserver/xa_audit_db_sqlserver.sql e521409
security-admin/db/sqlserver/xa_core_db_sqlserver.sql f58a420
security-admin/scripts/db_setup.py 1f05589
security-admin/scripts/install.properties b9bcb20
security-admin/scripts/setup.sh 85892ce
Diff: https://reviews.apache.org/r/31935/diff/
Testing (updated)
-------
Use case 1:
1] In install.property set DBA_MODE to 'false' and other db properties (
including db root password )
2] Run the setup.sh and check that db user and db are created
3] Bring up ranger admin and do sanity check
Use case 2:
1] Create required mysql db user and db
2] In install.property set DBA_MODE to 'true', and other db properties (
excluding db root password ).
3] Run the setup.sh and check that db user and db are created
4] Bring up ranger admin and do sanity check
Thanks,
Gautam Borad
