[ 
https://issues.apache.org/jira/browse/RANGER-919?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15235812#comment-15235812
 ] 

Don Bosco Durai commented on RANGER-919:
----------------------------------------

It would be good to support this feature in Ranger. For the first cut, we could 
support something similar to HBase. But I feel, eventually it will be good to 
integrate Ranger Tags with Accumulo's visibility model. This will help to 
extend Ranger policy engine to support dynamic policy management of visibility 
for users.

Another area we can look is to see how we can support "doAs" within Ranger 
plugin. E.g. in Accumolo, you can run the request passing the visibility you 
want and the actual request might be run bye another (super) user, similar to 
doAs. So at the Ranger plugin level we can prune the visibilities based on what 
the user as access to.


> Add support for Authorization and Auditing of Apache Accumulo
> -------------------------------------------------------------
>
>                 Key: RANGER-919
>                 URL: https://issues.apache.org/jira/browse/RANGER-919
>             Project: Ranger
>          Issue Type: New Feature
>            Reporter: John Highcock
>
> Currently Ranger supports authorization and auditing for some of the other 
> core hadoop components.  Accumulo should also be supported.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to