[jira] [Commented] (RANGER-1697) Update NiFi service def
[ https://issues.apache.org/jira/browse/RANGER-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16161205#comment-16161205 ] Nikhil Purbhe commented on RANGER-1697: --- Commited to master: https://github.com/apache/ranger/commit/7e35e5730f185a024aea20cb45f3fea360fbc4d0 committed to ranger-0.7 : https://github.com/apache/ranger/commit/a0f43d87a6e2d1de8cb311bc82827f0c836fa21c > Update NiFi service def > --- > > Key: RANGER-1697 > URL: https://issues.apache.org/jira/browse/RANGER-1697 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Nikhil Purbhe >Priority: Minor > Fix For: 1.0.0, 0.7.2 > > Attachments: 0001-RANGER-1697.patch, RANGER-1697-0.7.patch, > RANGER-1697.patch > > > Apache NiFi would like to update the service def file to ensure more > consistent policy support between NiFi and Ranger. NiFi is in the process of > introducing an improved Ranger authorizer that allows the policies to be > viewed in NiFi UI for easier, in app, understanding of the policies > configured in Ranger UI. This effort is being tracked with this JIRA [1]. > I would like to supply a patch with updates to the NiFi service def file. > Thanks! > [1] https://issues.apache.org/jira/browse/NIFI-4032 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (RANGER-1697) Update NiFi service def
[ https://issues.apache.org/jira/browse/RANGER-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16156929#comment-16156929 ] Matt Gilman commented on RANGER-1697: - Sounds good to me. Thanks! > Update NiFi service def > --- > > Key: RANGER-1697 > URL: https://issues.apache.org/jira/browse/RANGER-1697 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Nikhil Purbhe >Priority: Minor > Fix For: 0.7.2 > > Attachments: 0001-RANGER-1697.patch, RANGER-1697.patch > > > Apache NiFi would like to update the service def file to ensure more > consistent policy support between NiFi and Ranger. NiFi is in the process of > introducing an improved Ranger authorizer that allows the policies to be > viewed in NiFi UI for easier, in app, understanding of the policies > configured in Ranger UI. This effort is being tracked with this JIRA [1]. > I would like to supply a patch with updates to the NiFi service def file. > Thanks! > [1] https://issues.apache.org/jira/browse/NIFI-4032 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (RANGER-1697) Update NiFi service def
[ https://issues.apache.org/jira/browse/RANGER-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16156870#comment-16156870 ] Nikhil Purbhe commented on RANGER-1697: --- [~mcgilman] I am going with the option 1. > Update NiFi service def > --- > > Key: RANGER-1697 > URL: https://issues.apache.org/jira/browse/RANGER-1697 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Nikhil Purbhe >Priority: Minor > Fix For: 0.7.2 > > Attachments: 0001-RANGER-1697.patch, RANGER-1697.patch > > > Apache NiFi would like to update the service def file to ensure more > consistent policy support between NiFi and Ranger. NiFi is in the process of > introducing an improved Ranger authorizer that allows the policies to be > viewed in NiFi UI for easier, in app, understanding of the policies > configured in Ranger UI. This effort is being tracked with this JIRA [1]. > I would like to supply a patch with updates to the NiFi service def file. > Thanks! > [1] https://issues.apache.org/jira/browse/NIFI-4032 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (RANGER-1697) Update NiFi service def
[ https://issues.apache.org/jira/browse/RANGER-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16150508#comment-16150508 ] Matt Gilman commented on RANGER-1697: - Option 1 --- 1) Are disabled policies evaluated during access decisions? 2) Once the new service def is in place, existing exclude policies will still be visible in the UI. Will the fact that they are exclude policies be visible as well? Or will the policy look like a normal policy to the user? Option 2 --- 1) How would the exclude policies be converted to normal policies? If the policy previously was 'exclude Matt' what would the new policy be? Thanks! > Update NiFi service def > --- > > Key: RANGER-1697 > URL: https://issues.apache.org/jira/browse/RANGER-1697 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Nikhil Purbhe >Priority: Minor > Fix For: 0.7.2 > > Attachments: 0001-RANGER-1697.patch, RANGER-1697.patch > > > Apache NiFi would like to update the service def file to ensure more > consistent policy support between NiFi and Ranger. NiFi is in the process of > introducing an improved Ranger authorizer that allows the policies to be > viewed in NiFi UI for easier, in app, understanding of the policies > configured in Ranger UI. This effort is being tracked with this JIRA [1]. > I would like to supply a patch with updates to the NiFi service def file. > Thanks! > [1] https://issues.apache.org/jira/browse/NIFI-4032 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (RANGER-1697) Update NiFi service def
[ https://issues.apache.org/jira/browse/RANGER-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16150142#comment-16150142 ] Nikhil Purbhe commented on RANGER-1697: --- Is it possible to leave any existing exclude policies in place (maybe in read only form) until the user explicitly replaces it? --> yes matt, we can mark the policies as disabled and it will act as read only policy.but if user comes and mark it as enabled from UI then again that policy will behave as exclude policy. possible to automatically convert it into an equivalent 'include/normal' policy. ..>this way is also possible and those policies will act as include/normal policy instead of exclude policy. Request you to finalize the approach from above approaches. > Update NiFi service def > --- > > Key: RANGER-1697 > URL: https://issues.apache.org/jira/browse/RANGER-1697 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Nikhil Purbhe >Priority: Minor > Fix For: 0.7.2 > > Attachments: 0001-RANGER-1697.patch, RANGER-1697.patch > > > Apache NiFi would like to update the service def file to ensure more > consistent policy support between NiFi and Ranger. NiFi is in the process of > introducing an improved Ranger authorizer that allows the policies to be > viewed in NiFi UI for easier, in app, understanding of the policies > configured in Ranger UI. This effort is being tracked with this JIRA [1]. > I would like to supply a patch with updates to the NiFi service def file. > Thanks! > [1] https://issues.apache.org/jira/browse/NIFI-4032 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (RANGER-1697) Update NiFi service def
[ https://issues.apache.org/jira/browse/RANGER-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16145640#comment-16145640 ] Matt Gilman commented on RANGER-1697: - Exclude policies are not something that NiFi intended to support. I believe it may have been an oversight when this was originally contributed. Is it possible to leave any existing exclude policies in place (maybe in read only form) until the user explicitly replaces it? I do not believe it will be possible to automatically convert it into an equivalent 'include/normal' policy. > Update NiFi service def > --- > > Key: RANGER-1697 > URL: https://issues.apache.org/jira/browse/RANGER-1697 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Nikhil Purbhe >Priority: Minor > Fix For: 0.7.2 > > Attachments: 0001-RANGER-1697.patch, RANGER-1697.patch > > > Apache NiFi would like to update the service def file to ensure more > consistent policy support between NiFi and Ranger. NiFi is in the process of > introducing an improved Ranger authorizer that allows the policies to be > viewed in NiFi UI for easier, in app, understanding of the policies > configured in Ranger UI. This effort is being tracked with this JIRA [1]. > I would like to supply a patch with updates to the NiFi service def file. > Thanks! > [1] https://issues.apache.org/jira/browse/NIFI-4032 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (RANGER-1697) Update NiFi service def
[ https://issues.apache.org/jira/browse/RANGER-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16144849#comment-16144849 ] Nikhil Purbhe commented on RANGER-1697: --- There are 3 cases we have to consider, 1)Fresh install on ranger 0.7 : *No issue* 2)Upgrade scenario to Ranger 0.7 with exclude flag policy value as false :*No issue* (policies other than "exclude resource flag value as true" will not be an issue) 3)Upgrade scenario to Ranger 0.7 with the policy which contains exclude flag value as true for the resource. -this case will create *Issue* after an upgrade for existing nifi policies which contain *exclude flag on* (if there are any) , because after the upgrade we will not be showing exclude flag, but it will behave as "exclude policy value true" during policy enforcement. hence such policies with "exclude flag value as true" need to be handled. can you please let me know what approach to consider for case 3. cc: [~mcgilman] , [~vperiasamy] , [~mehul] > Update NiFi service def > --- > > Key: RANGER-1697 > URL: https://issues.apache.org/jira/browse/RANGER-1697 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Nikhil Purbhe >Priority: Minor > Fix For: 0.7.2 > > Attachments: 0001-RANGER-1697.patch, RANGER-1697.patch > > > Apache NiFi would like to update the service def file to ensure more > consistent policy support between NiFi and Ranger. NiFi is in the process of > introducing an improved Ranger authorizer that allows the policies to be > viewed in NiFi UI for easier, in app, understanding of the policies > configured in Ranger UI. This effort is being tracked with this JIRA [1]. > I would like to supply a patch with updates to the NiFi service def file. > Thanks! > [1] https://issues.apache.org/jira/browse/NIFI-4032 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
