Fabian Morgan created HDDS-13848:
------------------------------------
Summary: [STS] Create new method on IAccessAuthorizer to authorize
AssumeRole request in Ranger
Key: HDDS-13848
URL: https://issues.apache.org/jira/browse/HDDS-13848
Project: Apache Ozone
Issue Type: Sub-task
Reporter: Fabian Morgan
Assignee: Fabian Morgan
Create new method on IAccessAuthorizer to authorize AssumeRole request in
Ranger. The method will be String
generateAssumeRoleSessionPolicy(AssumeRoleRequest req). The method will ensure
the user is authorized to perform the action (considering IAM policy grants as
well, if any) and if authorized, will return a String that represents Ranger
JSON permissions that must be included in the STS token.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
