ATLAS-2691: update Apache Atlas website for 1.0.0 release (rc0)
Project: http://git-wip-us.apache.org/repos/asf/atlas-website/repo Commit: http://git-wip-us.apache.org/repos/asf/atlas-website/commit/e9346ee2 Tree: http://git-wip-us.apache.org/repos/asf/atlas-website/tree/e9346ee2 Diff: http://git-wip-us.apache.org/repos/asf/atlas-website/diff/e9346ee2 Branch: refs/heads/asf-site Commit: e9346ee2cfc69e49ff245e28205769b15f7105f1 Parents: f0d507e Author: Madhan Neethiraj <mad...@apache.org> Authored: Sat May 26 18:55:30 2018 -0700 Committer: Madhan Neethiraj <mad...@apache.org> Committed: Sat May 26 18:55:30 2018 -0700 ---------------------------------------------------------------------- 1.0.0-rc0/Architecture.html | 172 + 1.0.0-rc0/Atlas-Authentication.html | 231 + 1.0.0-rc0/Atlas-Authorization-Model.html | 227 + .../Atlas-Authorization-Ranger-Authorizer.html | 181 + .../Atlas-Authorization-Simple-Authorizer.html | 266 + 1.0.0-rc0/Bridge-Kafka.html | 171 + 1.0.0-rc0/ClassificationPropagation.html | 193 + 1.0.0-rc0/Configuration.html | 335 + 1.0.0-rc0/EclipseSetup.html | 226 + 1.0.0-rc0/Export-API.html | 304 + 1.0.0-rc0/Export-HDFS-API.html | 164 + 1.0.0-rc0/Glossary.html | 519 + 1.0.0-rc0/HighAvailability.html | 317 + 1.0.0-rc0/Hook-Falcon.html | 196 + 1.0.0-rc0/Hook-HBase.html | 211 + 1.0.0-rc0/Hook-Hive.html | 287 + 1.0.0-rc0/Hook-Sqoop.html | 207 + 1.0.0-rc0/Hook-Storm.html | 205 + 1.0.0-rc0/Import-API-Options.html | 267 + 1.0.0-rc0/Import-API.html | 293 + 1.0.0-rc0/Import-Export-API.html | 168 + 1.0.0-rc0/InstallationSteps.html | 458 + 1.0.0-rc0/Migration-0.8-to-1.0.html | 265 + 1.0.0-rc0/Notifications.html | 199 + 1.0.0-rc0/QuickStart.html | 159 + 1.0.0-rc0/Search-Advanced.html | 505 + 1.0.0-rc0/Search-Basic.html | 291 + 1.0.0-rc0/Security.html | 394 + 1.0.0-rc0/TypeSystem.html | 284 + 1.0.0-rc0/WhatsNew-1.0.html | 244 + 1.0.0-rc0/api/v2/application.wadl | 2239 ++ .../api/v2/atlas-webapp-gwt-json-overlay.jar | Bin 0 -> 10636 bytes 1.0.0-rc0/api/v2/atlas-webapp-js.zip | Bin 0 -> 6161 bytes .../atlas-webapp-json-client-json-sources.jar | Bin 0 -> 10027 bytes 1.0.0-rc0/api/v2/atlas-webapp-json-client.jar | Bin 0 -> 13355 bytes 1.0.0-rc0/api/v2/atlas-webapp-php.zip | Bin 0 -> 5158 bytes .../v2/atlas-webapp-xml-client-xml-sources.jar | Bin 0 -> 11217 bytes 1.0.0-rc0/api/v2/atlas-webapp-xml-client.jar | Bin 0 -> 13775 bytes 1.0.0-rc0/api/v2/atlas-webapp.rb | 3934 +++ 1.0.0-rc0/api/v2/css/enunciate.css | 122 + 1.0.0-rc0/api/v2/data.html | 426 + 1.0.0-rc0/api/v2/downloads.html | 665 + 1.0.0-rc0/api/v2/index.html | 737 + 1.0.0-rc0/api/v2/json_AtlasClassification.html | 181 + 1.0.0-rc0/api/v2/json_AtlasEntity.html | 302 + 1.0.0-rc0/api/v2/json_AtlasEntityHeader.html | 269 + 1.0.0-rc0/api/v2/json_AtlasObjectId.html | 156 + 1.0.0-rc0/api/v2/json_AtlasRelatedObjectId.html | 196 + 1.0.0-rc0/api/v2/json_AtlasRelationship.html | 355 + 1.0.0-rc0/api/v2/json_AtlasStruct.html | 146 + .../api/v2/json_AtlasTermAssignmentHeader.html | 221 + .../api/v2/json_AtlasTermAssignmentStatus.html | 151 + .../v2/json_ClassificationAssociateRequest.html | 158 + 1.0.0-rc0/api/v2/json_PropagateTags.html | 151 + 1.0.0-rc0/api/v2/json_Status.html | 126 + .../api/v2/json_Status_AtlasRelationship.html | 126 + 1.0.0-rc0/api/v2/json_TimeBoundary.html | 151 + 1.0.0-rc0/api/v2/ns0.xsd | 331 + 1.0.0-rc0/api/v2/resource_AdminResource.html | 754 + .../api/v2/resource_DataSetLineageResource.html | 314 + 1.0.0-rc0/api/v2/resource_DiscoveryREST.html | 1261 + 1.0.0-rc0/api/v2/resource_EntityREST.html | 1665 ++ 1.0.0-rc0/api/v2/resource_EntityResource.html | 1079 + 1.0.0-rc0/api/v2/resource_GlossaryREST.html | 2968 ++ 1.0.0-rc0/api/v2/resource_LineageREST.html | 212 + 1.0.0-rc0/api/v2/resource_LineageResource.html | 314 + .../v2/resource_MetadataDiscoveryResource.html | 371 + 1.0.0-rc0/api/v2/resource_RelationshipREST.html | 370 + 1.0.0-rc0/api/v2/resource_TypesREST.html | 1564 + 1.0.0-rc0/api/v2/resource_TypesResource.html | 373 + 1.0.0-rc0/api/v2/resources.html | 399 + 1.0.0-rc0/api/v2/syntax_json.html | 207 + 1.0.0-rc0/api/v2/syntax_xml.html | 196 + 1.0.0-rc0/api/v2/ui/css/print.css | 1 + 1.0.0-rc0/api/v2/ui/css/reset.css | 1 + 1.0.0-rc0/api/v2/ui/css/screen.css | 1 + 1.0.0-rc0/api/v2/ui/css/style.css | 1 + 1.0.0-rc0/api/v2/ui/css/typography.css | 0 1.0.0-rc0/api/v2/ui/fonts/DroidSans-Bold.ttf | Bin 0 -> 42480 bytes 1.0.0-rc0/api/v2/ui/fonts/DroidSans.ttf | Bin 0 -> 41028 bytes 1.0.0-rc0/api/v2/ui/images/collapse.gif | Bin 0 -> 69 bytes 1.0.0-rc0/api/v2/ui/images/expand.gif | Bin 0 -> 73 bytes 1.0.0-rc0/api/v2/ui/images/explorer_icons.png | Bin 0 -> 5115 bytes 1.0.0-rc0/api/v2/ui/images/favicon-16x16.png | Bin 0 -> 445 bytes 1.0.0-rc0/api/v2/ui/images/favicon-32x32.png | Bin 0 -> 1141 bytes 1.0.0-rc0/api/v2/ui/images/favicon.ico | Bin 0 -> 5430 bytes 1.0.0-rc0/api/v2/ui/images/logo_small.png | Bin 0 -> 455 bytes 1.0.0-rc0/api/v2/ui/images/pet_store_api.png | Bin 0 -> 631 bytes 1.0.0-rc0/api/v2/ui/images/throbber.gif | Bin 0 -> 9257 bytes 1.0.0-rc0/api/v2/ui/images/wordnik_api.png | Bin 0 -> 670 bytes 1.0.0-rc0/api/v2/ui/index.html | 120 + 1.0.0-rc0/api/v2/ui/lang/ca.js | 53 + 1.0.0-rc0/api/v2/ui/lang/el.js | 56 + 1.0.0-rc0/api/v2/ui/lang/en.js | 56 + 1.0.0-rc0/api/v2/ui/lang/es.js | 53 + 1.0.0-rc0/api/v2/ui/lang/fr.js | 54 + 1.0.0-rc0/api/v2/ui/lang/geo.js | 56 + 1.0.0-rc0/api/v2/ui/lang/it.js | 52 + 1.0.0-rc0/api/v2/ui/lang/ja.js | 56 + 1.0.0-rc0/api/v2/ui/lang/ko-kr.js | 53 + 1.0.0-rc0/api/v2/ui/lang/pl.js | 53 + 1.0.0-rc0/api/v2/ui/lang/pt.js | 53 + 1.0.0-rc0/api/v2/ui/lang/ru.js | 56 + 1.0.0-rc0/api/v2/ui/lang/tr.js | 53 + 1.0.0-rc0/api/v2/ui/lang/translator.js | 39 + 1.0.0-rc0/api/v2/ui/lang/zh-cn.js | 56 + 1.0.0-rc0/api/v2/ui/lib/backbone-min.js | 1 + 1.0.0-rc0/api/v2/ui/lib/es5-shim.js | 1 + 1.0.0-rc0/api/v2/ui/lib/handlebars-4.0.5.js | 3 + 1.0.0-rc0/api/v2/ui/lib/highlight.9.1.0.pack.js | 1 + .../v2/ui/lib/highlight.9.1.0.pack_extended.js | 1 + 1.0.0-rc0/api/v2/ui/lib/jquery-1.8.0.min.js | 3 + 1.0.0-rc0/api/v2/ui/lib/jquery.ba-bbq.min.js | 1 + 1.0.0-rc0/api/v2/ui/lib/jquery.slideto.min.js | 1 + 1.0.0-rc0/api/v2/ui/lib/jquery.wiggle.min.js | 1 + 1.0.0-rc0/api/v2/ui/lib/js-yaml.min.js | 2 + 1.0.0-rc0/api/v2/ui/lib/jsoneditor.min.js | 5 + 1.0.0-rc0/api/v2/ui/lib/lodash.min.js | 2 + 1.0.0-rc0/api/v2/ui/lib/marked.js | 1 + .../api/v2/ui/lib/object-assign-pollyfill.js | 1 + 1.0.0-rc0/api/v2/ui/lib/sanitize-html.min.js | 4 + 1.0.0-rc0/api/v2/ui/lib/swagger-oauth.js | 1 + 1.0.0-rc0/api/v2/ui/o2c.html | 20 + 1.0.0-rc0/api/v2/ui/swagger-ui.js | 25344 +++++++++++++++++ 1.0.0-rc0/api/v2/ui/swagger-ui.min.js | 15 + 1.0.0-rc0/api/v2/ui/swagger.json | 5959 ++++ .../api/v2/xml_ns0_atlasClassification.html | 221 + 1.0.0-rc0/api/v2/xml_ns0_atlasEntity.html | 371 + 1.0.0-rc0/api/v2/xml_ns0_atlasEntityHeader.html | 314 + 1.0.0-rc0/api/v2/xml_ns0_atlasObjectId.html | 188 + .../api/v2/xml_ns0_atlasRelatedObjectId.html | 252 + 1.0.0-rc0/api/v2/xml_ns0_atlasRelationship.html | 435 + 1.0.0-rc0/api/v2/xml_ns0_atlasStruct.html | 169 + .../v2/xml_ns0_atlasTermAssignmentHeader.html | 319 + .../v2/xml_ns0_atlasTermAssignmentStatus.html | 155 + 1.0.0-rc0/api/v2/xml_ns0_propagateTags.html | 155 + 1.0.0-rc0/api/v2/xml_ns0_status.html | 130 + 1.0.0-rc0/api/v2/xml_ns0_timeBoundary.html | 186 + 1.0.0-rc0/css/apache-maven-fluido-1.7.min.css | 17 + 1.0.0-rc0/css/print.css | 23 + 1.0.0-rc0/css/site.css | 1 + .../fonts/glyphicons-halflings-regular.eot | Bin 0 -> 35283 bytes .../fonts/glyphicons-halflings-regular.svg | 229 + .../fonts/glyphicons-halflings-regular.ttf | Bin 0 -> 55016 bytes .../fonts/glyphicons-halflings-regular.woff | Bin 0 -> 41793 bytes 1.0.0-rc0/images/accessories-text-editor.png | Bin 0 -> 746 bytes 1.0.0-rc0/images/add.gif | Bin 0 -> 397 bytes 1.0.0-rc0/images/apache-maven-project-2.png | Bin 0 -> 43073 bytes 1.0.0-rc0/images/application-certificate.png | Bin 0 -> 923 bytes 1.0.0-rc0/images/atlas-logo.png | Bin 0 -> 3115 bytes 1.0.0-rc0/images/column_lineage_ex1.png | Bin 0 -> 34057 bytes 1.0.0-rc0/images/contact-new.png | Bin 0 -> 736 bytes 1.0.0-rc0/images/document-properties.png | Bin 0 -> 577 bytes 1.0.0-rc0/images/drive-harddisk.png | Bin 0 -> 700 bytes 1.0.0-rc0/images/fix.gif | Bin 0 -> 366 bytes 1.0.0-rc0/images/icon_error_sml.gif | Bin 0 -> 633 bytes 1.0.0-rc0/images/icon_help_sml.gif | Bin 0 -> 1072 bytes 1.0.0-rc0/images/icon_info_sml.gif | Bin 0 -> 638 bytes 1.0.0-rc0/images/icon_success_sml.gif | Bin 0 -> 604 bytes 1.0.0-rc0/images/icon_warning_sml.gif | Bin 0 -> 625 bytes 1.0.0-rc0/images/image-x-generic.png | Bin 0 -> 662 bytes 1.0.0-rc0/images/internet-web-browser.png | Bin 0 -> 1017 bytes 1.0.0-rc0/images/logos/build-by-maven-black.png | Bin 0 -> 2294 bytes 1.0.0-rc0/images/logos/build-by-maven-white.png | Bin 0 -> 2260 bytes 1.0.0-rc0/images/logos/maven-feather.png | Bin 0 -> 3330 bytes 1.0.0-rc0/images/markdown/category_add_term.png | Bin 0 -> 116801 bytes .../images/markdown/category_add_term_1.png | Bin 0 -> 71846 bytes .../images/markdown/category_add_term_2.png | Bin 0 -> 62729 bytes .../markdown/category_details_with_terms.png | Bin 0 -> 130100 bytes 1.0.0-rc0/images/markdown/category_view_1.png | Bin 0 -> 59966 bytes 1.0.0-rc0/images/markdown/category_view_2.png | Bin 0 -> 72630 bytes .../markdown/category_view_category_context.png | Bin 0 -> 128708 bytes .../category_view_category_context_1.png | Bin 0 -> 136341 bytes .../markdown/category_view_glossary_context.png | Bin 0 -> 107211 bytes .../images/markdown/entity_add_term_modal.png | Bin 0 -> 50911 bytes .../markdown/entity_assigned_term_with_tag.png | Bin 0 -> 168622 bytes .../images/markdown/entity_details_add_term.png | Bin 0 -> 90585 bytes .../images/markdown/entity_search_add_term.png | Bin 0 -> 343143 bytes 1.0.0-rc0/images/markdown/term_add_category.png | Bin 0 -> 60619 bytes .../markdown/term_add_classification_1.png | Bin 0 -> 61967 bytes .../markdown/term_add_classification_2.png | Bin 0 -> 88754 bytes .../images/markdown/term_delete_context.png | Bin 0 -> 164179 bytes 1.0.0-rc0/images/markdown/term_details.png | Bin 0 -> 271792 bytes .../term_details_with_classification.png | Bin 0 -> 600595 bytes .../images/markdown/term_related_term_1.png | Bin 0 -> 82867 bytes 1.0.0-rc0/images/markdown/term_search.png | Bin 0 -> 95964 bytes 1.0.0-rc0/images/markdown/term_view_context.png | Bin 0 -> 113712 bytes .../markdown/term_with_classification.png | Bin 0 -> 58286 bytes .../images/markdown/terms_related_terms.png | Bin 0 -> 37079 bytes 1.0.0-rc0/images/markdown/terms_view.png | Bin 0 -> 90130 bytes 1.0.0-rc0/images/network-server.png | Bin 0 -> 536 bytes 1.0.0-rc0/images/package-x-generic.png | Bin 0 -> 717 bytes 1.0.0-rc0/images/profiles/pre-release.png | Bin 0 -> 32607 bytes 1.0.0-rc0/images/profiles/retired.png | Bin 0 -> 22003 bytes 1.0.0-rc0/images/profiles/sandbox.png | Bin 0 -> 33010 bytes 1.0.0-rc0/images/remove.gif | Bin 0 -> 607 bytes 1.0.0-rc0/images/rss.png | Bin 0 -> 474 bytes 1.0.0-rc0/images/twiki/architecture.png | Bin 0 -> 315403 bytes .../twiki/classification-propagation-1.png | Bin 0 -> 98689 bytes .../twiki/classification-propagation-2.png | Bin 0 -> 128774 bytes .../twiki/classification-propagation-3.png | Bin 0 -> 128278 bytes .../twiki/classification-propagation-4.png | Bin 0 -> 106518 bytes .../twiki/classification-propagation-5.png | Bin 0 -> 78040 bytes .../twiki/classification-propagation-6.png | Bin 0 -> 69127 bytes .../twiki/classification-propagation-7.png | Bin 0 -> 72418 bytes .../twiki/classification-propagation-8.png | Bin 0 -> 140839 bytes ...assification-propagation-entity-delete-1.png | Bin 0 -> 84846 bytes ...assification-propagation-entity-delete-2.png | Bin 0 -> 94985 bytes ...assification-propagation-entity-delete-3.png | Bin 0 -> 136134 bytes ...assification-propagation-entity-delete-4.png | Bin 0 -> 137723 bytes 1.0.0-rc0/images/twiki/guide-class-diagram.png | Bin 0 -> 40375 bytes 1.0.0-rc0/images/twiki/guide-instance-graph.png | Bin 0 -> 179941 bytes 1.0.0-rc0/images/twiki/ranger-audit.png | Bin 0 -> 115948 bytes 1.0.0-rc0/images/twiki/ranger-policy-admin.png | Bin 0 -> 227632 bytes .../images/twiki/ranger-policy-entities.png | Bin 0 -> 303316 bytes 1.0.0-rc0/images/twiki/ranger-policy-types.png | Bin 0 -> 253200 bytes .../twiki/search-basic-hive_column-PII.png | Bin 0 -> 502513 bytes ...h-basic-hive_table-customers-or-provider.png | Bin 0 -> 373583 bytes ...basic-hive_table-customers-owner_is_hive.png | Bin 0 -> 366589 bytes .../twiki/search-basic-hive_table-customers.png | Bin 0 -> 305538 bytes 1.0.0-rc0/images/update.gif | Bin 0 -> 1090 bytes 1.0.0-rc0/images/window-new.png | Bin 0 -> 583 bytes 1.0.0-rc0/img/glyphicons-halflings-white.png | Bin 0 -> 8777 bytes 1.0.0-rc0/img/glyphicons-halflings.png | Bin 0 -> 12799 bytes 1.0.0-rc0/index.html | 233 + 1.0.0-rc0/issue-tracking.html | 143 + 1.0.0-rc0/js/apache-maven-fluido-1.7.min.js | 25 + 1.0.0-rc0/license.html | 347 + 1.0.0-rc0/mail-lists.html | 164 + 1.0.0-rc0/project-info.html | 163 + 1.0.0-rc0/source-repository.html | 154 + 1.0.0-rc0/team-list.html | 503 + index.html | 1 + 233 files changed, 68317 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/atlas-website/blob/e9346ee2/1.0.0-rc0/Architecture.html ---------------------------------------------------------------------- diff --git a/1.0.0-rc0/Architecture.html b/1.0.0-rc0/Architecture.html new file mode 100644 index 0000000..fba969a --- /dev/null +++ b/1.0.0-rc0/Architecture.html @@ -0,0 +1,172 @@ +<!DOCTYPE html> +<!-- + | Generated by Apache Maven Doxia Site Renderer 1.8 from src/site/twiki/Architecture.twiki at 2018-05-26 + | Rendered using Apache Maven Fluido Skin 1.7 +--> +<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en"> + <head> + <meta charset="UTF-8" /> + <meta name="viewport" content="width=device-width, initial-scale=1.0" /> + <meta name="Date-Revision-yyyymmdd" content="20180526" /> + <meta http-equiv="Content-Language" content="en" /> + <title>Apache Atlas – Architecture</title> + <link rel="stylesheet" href="./css/apache-maven-fluido-1.7.min.css" /> + <link rel="stylesheet" href="./css/site.css" /> + <link rel="stylesheet" href="./css/print.css" media="print" /> + <script type="text/javascript" src="./js/apache-maven-fluido-1.7.min.js"></script> + </head> + <body class="topBarEnabled"> + <div id="topbar" class="navbar navbar-fixed-top "> + <div class="navbar-inner"> + <div class="container" style="width: 68%;"><div class="nav-collapse"> + <ul class="nav"> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Atlas <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="index.html" title="About">About</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS"; title="Wiki">Wiki</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS"; title="News">News</a></li> + <li><a href="https://git-wip-us.apache.org/repos/asf/atlas.git"; title="Git">Git</a></li> + <li><a href="https://issues.apache.org/jira/browse/ATLAS"; title="Jira">Jira</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS/PoweredBy"; title="Powered by">Powered by</a></li> + <li><a href="http://blogs.apache.org/atlas/"; title="Blog">Blog</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Project Information <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="project-info.html" title="Summary">Summary</a></li> + <li><a href="mail-lists.html" title="Mailing Lists">Mailing Lists</a></li> + <li><a href="http://webchat.freenode.net?channels=apacheatlas&uio=d4"; title="IRC">IRC</a></li> + <li><a href="team-list.html" title="Team">Team</a></li> + <li><a href="issue-tracking.html" title="Issue Tracking">Issue Tracking</a></li> + <li><a href="source-repository.html" title="Source Repository">Source Repository</a></li> + <li><a href="license.html" title="License">License</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Releases <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/1.0.0-alpha/"; title="1.0.0-alpha">1.0.0-alpha</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/1.0.0-rc0/"; title="1.0.0-rc0">1.0.0-rc0</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/0.8.2/"; title="0.8.2">0.8.2</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/0.8.1/"; title="0.8.1">0.8.1</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.8.0-incubating/"; title="0.8-incubating">0.8-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.7.1-incubating/"; title="0.7.1-incubating">0.7.1-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.7.0-incubating/"; title="0.7-incubating">0.7-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.6.0-incubating/"; title="0.6-incubating">0.6-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.5.0-incubating/"; title="0.5-incubating">0.5-incubating</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Documentation <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="../index.html" title="latest">latest</a></li> + <li><a href="../1.0.0-alpha/index.html" title="1.0.0-alpha">1.0.0-alpha</a></li> + <li><a href="../1.0.0-rc0/index.html" title="1.0.0-rc0">1.0.0-rc0</a></li> + <li><a href="../0.8.2/index.html" title="0.8.2">0.8.2</a></li> + <li><a href="../0.8.1/index.html" title="0.8.1">0.8.1</a></li> + <li><a href="../0.8.0-incubating/index.html" title="0.8-incubating">0.8-incubating</a></li> + <li><a href="../0.7.1-incubating/index.html" title="0.7.1-incubating">0.7.1-incubating</a></li> + <li><a href="../0.7.0-incubating/index.html" title="0.7-incubating">0.7-incubating</a></li> + <li><a href="../0.6.0-incubating/index.html" title="0.6-incubating">0.6-incubating</a></li> + <li><a href="../0.5.0-incubating/index.html" title="0.5-incubating">0.5-incubating</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">ASF <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="http://www.apache.org/foundation/how-it-works.html"; title="How Apache Works">How Apache Works</a></li> + <li><a href="https://www.apache.org/events/current-event"; title="Events">Events</a></li> + <li><a href="https://www.apache.org/licenses/"; title="License">License</a></li> + <li><a href="http://www.apache.org/foundation/"; title="Foundation">Foundation</a></li> + <li><a href="http://www.apache.org/foundation/sponsorship.html"; title="Sponsoring Apache">Sponsoring Apache</a></li> + <li><a href="http://www.apache.org/foundation/thanks.html"; title="Thanks">Thanks</a></li> + </ul> + </li> + </ul> +<form id="search-form" action="https://www.google.com/search"; method="get" class="navbar-search pull-right" > + <input value="http://atlas.apache.org"; name="sitesearch" type="hidden"/> + <input class="search-query" name="q" id="query" type="text" /> +</form> +<script type="text/javascript">asyncJs( 'https://cse.google.com/brand?form=search-form' )</script> + <iframe src="https://www.facebook.com/plugins/like.php?href=http://atlas.apache.org/atlas-docs&send=false&layout=button_count&show-faces=false&action=like&colorscheme=dark"; + scrolling="no" frameborder="0" + style="border:none; width:100px; height:20px; margin-top: 10px;" class="pull-right" ></iframe> + <script type="text/javascript">asyncJs( 'https://apis.google.com/js/plusone.js' )</script> + <ul class="nav pull-right"><li style="margin-top: 10px;"> + <div class="g-plusone" data-href="http://atlas.apache.org/atlas-docs"; data-size="medium" width="60px" align="right" ></div> + </li></ul> + </div> + </div> + </div> + </div> + <div class="container"> + <div id="banner"> + <div class="pull-left"><a href=".." id="bannerLeft"><img src="images/atlas-logo.png" alt="Apache Atlas" width="200px" height="45px"/></a></div> + <div class="pull-right"></div> + <div class="clear"><hr/></div> + </div> + + <div id="breadcrumbs"> + <ul class="breadcrumb"> + <li class=""><a href="http://www.apache.org"; class="externalLink" title="Apache">Apache</a><span class="divider">/</span></li> + <li class=""><a href="index.html" title="Atlas">Atlas</a><span class="divider">/</span></li> + <li class="active ">Architecture</li> + <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2018-05-26</li> + <li id="projectVersion" class="pull-right">Version: 1.0.0-rc0</li> + </ul> + </div> + <div id="bodyColumn" > +<div class="section"> +<h2><a name="Architecture"></a>Architecture</h2></div> +<div class="section"> +<h3><a name="Introduction"></a>Introduction</h3></div> +<div class="section"> +<h3><a name="Atlas_High_Level_Architecture_-_Overview"></a>Atlas High Level Architecture - Overview</h3> +<p><img src="images/twiki/architecture.png" alt="" /></p> +<p>The components of Atlas can be grouped under the following major categories:</p></div> +<div class="section"> +<h4><a name="Core"></a>Core</h4> +<p>Atlas core includes the following components:</p> +<p><b>Type System</b>: Atlas allows users to define a model for the metadata objects they want to manage. The model is composed of definitions called ‘types’. Instances of ‘types’ called ‘entities’ represent the actual metadata objects that are managed. The Type System is a component that allows users to define and manage the types and entities. All metadata objects managed by Atlas out of the box (like Hive tables, for e.g.) are modelled using types and represented as entities. To store new types of metadata in Atlas, one needs to understand the concepts of the type system component.</p> +<p>One key point to note is that the generic nature of the modelling in Atlas allows data stewards and integrators to define both technical metadata and business metadata. It is also possible to define rich relationships between the two using features of Atlas.</p> +<p><b>Graph Engine</b>: Internally, Atlas persists metadata objects it manages using a Graph model. This approach provides great flexibility and enables efficient handling of rich relationships between the metadata objects. Graph engine component is responsible for translating between types and entities of the Atlas type system, and the underlying graph persistence model. In addition to managing the graph objects, the graph engine also creates the appropriate indices for the metadata objects so that they can be searched efficiently. Atlas uses the <a href="./JanusGraph.html">JanusGraph</a> to store the metadata objects.</p> +<p><b>Ingest / Export</b>: The Ingest component allows metadata to be added to Atlas. Similarly, the Export component exposes metadata changes detected by Atlas to be raised as events. Consumers can consume these change events to react to metadata changes in real time.</p></div> +<div class="section"> +<h4><a name="Integration"></a>Integration</h4> +<p>Users can manage metadata in Atlas using two methods:</p> +<p><b>API</b>: All functionality of Atlas is exposed to end users via a REST API that allows types and entities to be created, updated and deleted. It is also the primary mechanism to query and discover the types and entities managed by Atlas.</p> +<p><b>Messaging</b>: In addition to the API, users can choose to integrate with Atlas using a messaging interface that is based on Kafka. This is useful both for communicating metadata objects to Atlas, and also to consume metadata change events from Atlas using which applications can be built. The messaging interface is particularly useful if one wishes to use a more loosely coupled integration with Atlas that could allow for better scalability, reliability etc. Atlas uses Apache Kafka as a notification server for communication between hooks and downstream consumers of metadata notification events. Events are written by the hooks and Atlas to different Kafka topics.</p></div> +<div class="section"> +<h4><a name="Metadata_sources"></a>Metadata sources</h4> +<p>Atlas supports integration with many sources of metadata out of the box. More integrations will be added in future as well. Currently, Atlas supports ingesting and managing metadata from the following sources:</p> +<p></p> +<ul> +<li><a href="./Hook-HBase.html">HBase</a></li> +<li><a href="./Hook-Hive.html">Hive</a></li> +<li><a href="./Hook-Sqoop.html">Sqoop</a></li> +<li><a href="./Hook-Storm.html">Storm</a></li> +<li><a href="./Bridge-Kafka.html">Kafka</a></li></ul> +<p>The integration implies two things: There are metadata models that Atlas defines natively to represent objects of these components. There are components Atlas provides to ingest metadata objects from these components (in real time or in batch mode in some cases).</p></div> +<div class="section"> +<h4><a name="Applications"></a>Applications</h4> +<p>The metadata managed by Atlas is consumed by a variety of applications for satisfying many governance use cases.</p> +<p><b>Atlas Admin UI</b>: This component is a web based application that allows data stewards and scientists to discover and annotate metadata. Of primary importance here is a search interface and SQL like query language that can be used to query the metadata types and objects managed by Atlas. The Admin UI uses the REST API of Atlas for building its functionality.</p> +<p><b>Tag Based Policies</b>: <a class="externalLink" href="http://ranger.apache.org/";>Apache Ranger</a> is an advanced security management solution for the Hadoop ecosystem having wide integration with a variety of Hadoop components. By integrating with Atlas, Ranger allows security administrators to define metadata driven security policies for effective governance. Ranger is a consumer to the metadata change events notified by Atlas.</p></div> + </div> + </div> + <hr/> + <footer> + <div class="container"> + <div class="row"> +<p><a href="https://www.apache.org/foundation/contributing";><img src="https://www.apache.org/images/SupportApache-small.png"; alt="Support the ASF" id="asf-logo" height="20" width="20" /></a>Copyright © 2011-2018 The Apache Software Foundation. Licensed under the <a href="https://www.apache.org/licenses/";>Apache License, Version 2.0</a>.<br/> +Apache Atlas, Atlas, Apache, the Apache feather logo are trademarks of the <a href="https://www.apache.org";>Apache Software Foundation</a>.<br/> +All other marks mentioned may be trademarks or registered trademarks of their respective owners.</p> + </div> + <p id="poweredBy" class="pull-right"><a href="http://maven.apache.org/"; title="Built by Maven" class="poweredBy"><img class="builtBy" alt="Built by Maven" src="./images/logos/maven-feather.png" /></a> +</p> + </div> + </footer> + </body> +</html> http://git-wip-us.apache.org/repos/asf/atlas-website/blob/e9346ee2/1.0.0-rc0/Atlas-Authentication.html ---------------------------------------------------------------------- diff --git a/1.0.0-rc0/Atlas-Authentication.html b/1.0.0-rc0/Atlas-Authentication.html new file mode 100644 index 0000000..0f87a3d --- /dev/null +++ b/1.0.0-rc0/Atlas-Authentication.html @@ -0,0 +1,231 @@ +<!DOCTYPE html> +<!-- + | Generated by Apache Maven Doxia Site Renderer 1.8 from src/site/twiki/Atlas-Authentication.twiki at 2018-05-26 + | Rendered using Apache Maven Fluido Skin 1.7 +--> +<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en"> + <head> + <meta charset="UTF-8" /> + <meta name="viewport" content="width=device-width, initial-scale=1.0" /> + <meta name="Date-Revision-yyyymmdd" content="20180526" /> + <meta http-equiv="Content-Language" content="en" /> + <title>Apache Atlas – Authentication in Apache Atlas.</title> + <link rel="stylesheet" href="./css/apache-maven-fluido-1.7.min.css" /> + <link rel="stylesheet" href="./css/site.css" /> + <link rel="stylesheet" href="./css/print.css" media="print" /> + <script type="text/javascript" src="./js/apache-maven-fluido-1.7.min.js"></script> + </head> + <body class="topBarEnabled"> + <div id="topbar" class="navbar navbar-fixed-top "> + <div class="navbar-inner"> + <div class="container" style="width: 68%;"><div class="nav-collapse"> + <ul class="nav"> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Atlas <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="index.html" title="About">About</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS"; title="Wiki">Wiki</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS"; title="News">News</a></li> + <li><a href="https://git-wip-us.apache.org/repos/asf/atlas.git"; title="Git">Git</a></li> + <li><a href="https://issues.apache.org/jira/browse/ATLAS"; title="Jira">Jira</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS/PoweredBy"; title="Powered by">Powered by</a></li> + <li><a href="http://blogs.apache.org/atlas/"; title="Blog">Blog</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Project Information <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="project-info.html" title="Summary">Summary</a></li> + <li><a href="mail-lists.html" title="Mailing Lists">Mailing Lists</a></li> + <li><a href="http://webchat.freenode.net?channels=apacheatlas&uio=d4"; title="IRC">IRC</a></li> + <li><a href="team-list.html" title="Team">Team</a></li> + <li><a href="issue-tracking.html" title="Issue Tracking">Issue Tracking</a></li> + <li><a href="source-repository.html" title="Source Repository">Source Repository</a></li> + <li><a href="license.html" title="License">License</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Releases <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/1.0.0-alpha/"; title="1.0.0-alpha">1.0.0-alpha</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/1.0.0-rc0/"; title="1.0.0-rc0">1.0.0-rc0</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/0.8.2/"; title="0.8.2">0.8.2</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/0.8.1/"; title="0.8.1">0.8.1</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.8.0-incubating/"; title="0.8-incubating">0.8-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.7.1-incubating/"; title="0.7.1-incubating">0.7.1-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.7.0-incubating/"; title="0.7-incubating">0.7-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.6.0-incubating/"; title="0.6-incubating">0.6-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.5.0-incubating/"; title="0.5-incubating">0.5-incubating</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Documentation <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="../index.html" title="latest">latest</a></li> + <li><a href="../1.0.0-alpha/index.html" title="1.0.0-alpha">1.0.0-alpha</a></li> + <li><a href="../1.0.0-rc0/index.html" title="1.0.0-rc0">1.0.0-rc0</a></li> + <li><a href="../0.8.2/index.html" title="0.8.2">0.8.2</a></li> + <li><a href="../0.8.1/index.html" title="0.8.1">0.8.1</a></li> + <li><a href="../0.8.0-incubating/index.html" title="0.8-incubating">0.8-incubating</a></li> + <li><a href="../0.7.1-incubating/index.html" title="0.7.1-incubating">0.7.1-incubating</a></li> + <li><a href="../0.7.0-incubating/index.html" title="0.7-incubating">0.7-incubating</a></li> + <li><a href="../0.6.0-incubating/index.html" title="0.6-incubating">0.6-incubating</a></li> + <li><a href="../0.5.0-incubating/index.html" title="0.5-incubating">0.5-incubating</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">ASF <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="http://www.apache.org/foundation/how-it-works.html"; title="How Apache Works">How Apache Works</a></li> + <li><a href="https://www.apache.org/events/current-event"; title="Events">Events</a></li> + <li><a href="https://www.apache.org/licenses/"; title="License">License</a></li> + <li><a href="http://www.apache.org/foundation/"; title="Foundation">Foundation</a></li> + <li><a href="http://www.apache.org/foundation/sponsorship.html"; title="Sponsoring Apache">Sponsoring Apache</a></li> + <li><a href="http://www.apache.org/foundation/thanks.html"; title="Thanks">Thanks</a></li> + </ul> + </li> + </ul> +<form id="search-form" action="https://www.google.com/search"; method="get" class="navbar-search pull-right" > + <input value="http://atlas.apache.org"; name="sitesearch" type="hidden"/> + <input class="search-query" name="q" id="query" type="text" /> +</form> +<script type="text/javascript">asyncJs( 'https://cse.google.com/brand?form=search-form' )</script> + <iframe src="https://www.facebook.com/plugins/like.php?href=http://atlas.apache.org/atlas-docs&send=false&layout=button_count&show-faces=false&action=like&colorscheme=dark"; + scrolling="no" frameborder="0" + style="border:none; width:100px; height:20px; margin-top: 10px;" class="pull-right" ></iframe> + <script type="text/javascript">asyncJs( 'https://apis.google.com/js/plusone.js' )</script> + <ul class="nav pull-right"><li style="margin-top: 10px;"> + <div class="g-plusone" data-href="http://atlas.apache.org/atlas-docs"; data-size="medium" width="60px" align="right" ></div> + </li></ul> + </div> + </div> + </div> + </div> + <div class="container"> + <div id="banner"> + <div class="pull-left"><a href=".." id="bannerLeft"><img src="images/atlas-logo.png" alt="Apache Atlas" width="200px" height="45px"/></a></div> + <div class="pull-right"></div> + <div class="clear"><hr/></div> + </div> + + <div id="breadcrumbs"> + <ul class="breadcrumb"> + <li class=""><a href="http://www.apache.org"; class="externalLink" title="Apache">Apache</a><span class="divider">/</span></li> + <li class=""><a href="index.html" title="Atlas">Atlas</a><span class="divider">/</span></li> + <li class="active ">Authentication in Apache Atlas.</li> + <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2018-05-26</li> + <li id="projectVersion" class="pull-right">Version: 1.0.0-rc0</li> + </ul> + </div> + <div id="bodyColumn" > +<div class="section"> +<h3><a name="Authentication_in_Apache_Atlas."></a>Authentication in Apache Atlas.</h3></div> +<div class="section"> +<h4><a name="Authentication"></a>Authentication</h4> +<p>Atlas supports following authentication methods</p> +<p></p> +<ul> +<li><b>File</b></li> +<li><b>Kerberos</b></li> +<li><b>LDAP</b></li></ul> +<p>Following properties should be set true to enable the authentication of that type in <tt>atlas-application.properties</tt> file.</p> +<div class="source"><pre class="prettyprint"> +atlas.authentication.method.kerberos=true|false +atlas.authentication.method.ldap=true|false +atlas.authentication.method.file=true|false + +</pre></div> +<p>If two or more authentication methods are set to true, then the authentication falls back to the latter method if the earlier one fails. For example if Kerberos authentication is set to true and ldap authentication is also set to true then, if for a request without kerberos principal and keytab LDAP authentication will be used as a fallback scenario.</p></div> +<div class="section"> +<h5><a name="FILE_method."></a>FILE method.</h5> +<p>File authentication requires users' login details in users credentials file in the format specified below and the file path should set to property <tt>atlas.authentication.method.file.filename</tt> in <tt>atlas-application.properties</tt>.</p> +<div class="source"><pre class="prettyprint"> +atlas.authentication.method.file=true +atlas.authentication.method.file.filename=${sys:atlas.home}/conf/users-credentials.properties + +</pre></div> +<p>The users credentials file should have below format</p> +<div class="source"><pre class="prettyprint"> +username=group::sha256-password + +</pre></div> +<p>For e.g.</p> +<div class="source"><pre class="prettyprint"> +admin=ADMIN::e7cf3ef4f17c3999a94f2c6f612e8a888e5b1026878e4e19398b23bd38ec221a + +</pre></div> +<p>Users group can be either <b>ADMIN</b>, <b>DATA_STEWARD</b> OR <b>DATA_SCIENTIST</b></p> +<p><b>Note</b>:-password is encoded with sha256 encoding method and can be generated using unix tool.</p> +<p>For e.g.</p> +<div class="source"><pre class="prettyprint"> +echo -n "Password" | sha256sum +e7cf3ef4f17c3999a94f2c6f612e8a888e5b1026878e4e19398b23bd38ec221a - + +</pre></div></div> +<div class="section"> +<h5><a name="Kerberos_Method."></a>Kerberos Method.</h5> +<p>To enable the authentication in Kerberos mode in Atlas, set the property <tt>atlas.authentication.method.kerberos</tt> to true in <tt>atlas-application.properties</tt></p> +<div class="source"><pre class="prettyprint"> +atlas.authentication.method.kerberos = true + +</pre></div> +<p>Also following properties should be set.</p> +<div class="source"><pre class="prettyprint"> +atlas.authentication.method.kerberos.principal=<principal>/<fqdn>@EXAMPLE.COM +atlas.authentication.method.kerberos.keytab = /<key tab filepath>.keytab +atlas.authentication.method.kerberos.name.rules = RULE:[2:$1@$0](at...@example.com)s/.*/atlas/ +atlas.authentication.method.kerberos.token.validity = 3600 [ in Seconds (optional)] + +</pre></div></div> +<div class="section"> +<h5><a name="LDAP_Method."></a>LDAP Method.</h5> +<p>To enable the authentication in LDAP mode in Atlas, set the property <tt>atlas.authentication.method.ldap</tt> to true and also set Ldap type to property <tt>atlas.authentication.method.ldap.type</tt> to LDAP or AD in <tt>atlas-application.properties</tt>. Use AD if connecting to Active Directory.</p> +<div class="source"><pre class="prettyprint"> +atlas.authentication.method.ldap=true +atlas.authentication.method.ldap.type=ldap|ad + +</pre></div> +<p>For LDAP or AD the following configuration needs to be set in atlas application properties.</p> +<p><b>Active Directory</b></p> +<div class="source"><pre class="prettyprint"> +atlas.authentication.method.ldap.ad.domain= example.com +atlas.authentication.method.ldap.ad.url=ldap://<AD server ip>:389 +atlas.authentication.method.ldap.ad.base.dn=DC=example,DC=com +atlas.authentication.method.ldap.ad.bind.dn=CN=Administrator,CN=Users,DC=example,DC=com +atlas.authentication.method.ldap.ad.bind.password=<password> +atlas.authentication.method.ldap.ad.referral=ignore +atlas.authentication.method.ldap.ad.user.searchfilter=(sAMAccountName={0}) +atlas.authentication.method.ldap.ad.default.role=ROLE_USER + +</pre></div> +<p><b>LDAP Directroy</b></p> +<div class="source"><pre class="prettyprint"> +atlas.authentication.method.ldap.url=ldap://<Ldap server ip>:389 +atlas.authentication.method.ldap.userDNpattern=uid={0],ou=users,dc=example,dc=com +atlas.authentication.method.ldap.groupSearchBase=dc=example,dc=com +atlas.authentication.method.ldap.groupSearchFilter=(member=cn={0},ou=users,dc=example,dc=com +atlas.authentication.method.ldap.groupRoleAttribute=cn +atlas.authentication.method.ldap.base.dn=dc=example,dc=com +atlas.authentication.method.ldap.bind.dn=cn=Manager,dc=example,dc=com +atlas.authentication.method.ldap.bind.password=<password> +atlas.authentication.method.ldap.referral=ignore +atlas.authentication.method.ldap.user.searchfilter=(uid={0}) +atlas.authentication.method.ldap.default.role=ROLE_USER + +</pre></div></div> + </div> + </div> + <hr/> + <footer> + <div class="container"> + <div class="row"> +<p><a href="https://www.apache.org/foundation/contributing";><img src="https://www.apache.org/images/SupportApache-small.png"; alt="Support the ASF" id="asf-logo" height="20" width="20" /></a>Copyright © 2011-2018 The Apache Software Foundation. Licensed under the <a href="https://www.apache.org/licenses/";>Apache License, Version 2.0</a>.<br/> +Apache Atlas, Atlas, Apache, the Apache feather logo are trademarks of the <a href="https://www.apache.org";>Apache Software Foundation</a>.<br/> +All other marks mentioned may be trademarks or registered trademarks of their respective owners.</p> + </div> + <p id="poweredBy" class="pull-right"><a href="http://maven.apache.org/"; title="Built by Maven" class="poweredBy"><img class="builtBy" alt="Built by Maven" src="./images/logos/maven-feather.png" /></a> +</p> + </div> + </footer> + </body> +</html> http://git-wip-us.apache.org/repos/asf/atlas-website/blob/e9346ee2/1.0.0-rc0/Atlas-Authorization-Model.html ---------------------------------------------------------------------- diff --git a/1.0.0-rc0/Atlas-Authorization-Model.html b/1.0.0-rc0/Atlas-Authorization-Model.html new file mode 100644 index 0000000..849ca1e --- /dev/null +++ b/1.0.0-rc0/Atlas-Authorization-Model.html @@ -0,0 +1,227 @@ +<!DOCTYPE html> +<!-- + | Generated by Apache Maven Doxia Site Renderer 1.8 from src/site/twiki/Atlas-Authorization-Model.twiki at 2018-05-26 + | Rendered using Apache Maven Fluido Skin 1.7 +--> +<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en"> + <head> + <meta charset="UTF-8" /> + <meta name="viewport" content="width=device-width, initial-scale=1.0" /> + <meta name="Date-Revision-yyyymmdd" content="20180526" /> + <meta http-equiv="Content-Language" content="en" /> + <title>Apache Atlas – Atlas Authorization Model</title> + <link rel="stylesheet" href="./css/apache-maven-fluido-1.7.min.css" /> + <link rel="stylesheet" href="./css/site.css" /> + <link rel="stylesheet" href="./css/print.css" media="print" /> + <script type="text/javascript" src="./js/apache-maven-fluido-1.7.min.js"></script> + </head> + <body class="topBarEnabled"> + <div id="topbar" class="navbar navbar-fixed-top "> + <div class="navbar-inner"> + <div class="container" style="width: 68%;"><div class="nav-collapse"> + <ul class="nav"> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Atlas <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="index.html" title="About">About</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS"; title="Wiki">Wiki</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS"; title="News">News</a></li> + <li><a href="https://git-wip-us.apache.org/repos/asf/atlas.git"; title="Git">Git</a></li> + <li><a href="https://issues.apache.org/jira/browse/ATLAS"; title="Jira">Jira</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS/PoweredBy"; title="Powered by">Powered by</a></li> + <li><a href="http://blogs.apache.org/atlas/"; title="Blog">Blog</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Project Information <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="project-info.html" title="Summary">Summary</a></li> + <li><a href="mail-lists.html" title="Mailing Lists">Mailing Lists</a></li> + <li><a href="http://webchat.freenode.net?channels=apacheatlas&uio=d4"; title="IRC">IRC</a></li> + <li><a href="team-list.html" title="Team">Team</a></li> + <li><a href="issue-tracking.html" title="Issue Tracking">Issue Tracking</a></li> + <li><a href="source-repository.html" title="Source Repository">Source Repository</a></li> + <li><a href="license.html" title="License">License</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Releases <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/1.0.0-alpha/"; title="1.0.0-alpha">1.0.0-alpha</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/1.0.0-rc0/"; title="1.0.0-rc0">1.0.0-rc0</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/0.8.2/"; title="0.8.2">0.8.2</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/0.8.1/"; title="0.8.1">0.8.1</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.8.0-incubating/"; title="0.8-incubating">0.8-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.7.1-incubating/"; title="0.7.1-incubating">0.7.1-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.7.0-incubating/"; title="0.7-incubating">0.7-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.6.0-incubating/"; title="0.6-incubating">0.6-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.5.0-incubating/"; title="0.5-incubating">0.5-incubating</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Documentation <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="../index.html" title="latest">latest</a></li> + <li><a href="../1.0.0-alpha/index.html" title="1.0.0-alpha">1.0.0-alpha</a></li> + <li><a href="../1.0.0-rc0/index.html" title="1.0.0-rc0">1.0.0-rc0</a></li> + <li><a href="../0.8.2/index.html" title="0.8.2">0.8.2</a></li> + <li><a href="../0.8.1/index.html" title="0.8.1">0.8.1</a></li> + <li><a href="../0.8.0-incubating/index.html" title="0.8-incubating">0.8-incubating</a></li> + <li><a href="../0.7.1-incubating/index.html" title="0.7.1-incubating">0.7.1-incubating</a></li> + <li><a href="../0.7.0-incubating/index.html" title="0.7-incubating">0.7-incubating</a></li> + <li><a href="../0.6.0-incubating/index.html" title="0.6-incubating">0.6-incubating</a></li> + <li><a href="../0.5.0-incubating/index.html" title="0.5-incubating">0.5-incubating</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">ASF <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="http://www.apache.org/foundation/how-it-works.html"; title="How Apache Works">How Apache Works</a></li> + <li><a href="https://www.apache.org/events/current-event"; title="Events">Events</a></li> + <li><a href="https://www.apache.org/licenses/"; title="License">License</a></li> + <li><a href="http://www.apache.org/foundation/"; title="Foundation">Foundation</a></li> + <li><a href="http://www.apache.org/foundation/sponsorship.html"; title="Sponsoring Apache">Sponsoring Apache</a></li> + <li><a href="http://www.apache.org/foundation/thanks.html"; title="Thanks">Thanks</a></li> + </ul> + </li> + </ul> +<form id="search-form" action="https://www.google.com/search"; method="get" class="navbar-search pull-right" > + <input value="http://atlas.apache.org"; name="sitesearch" type="hidden"/> + <input class="search-query" name="q" id="query" type="text" /> +</form> +<script type="text/javascript">asyncJs( 'https://cse.google.com/brand?form=search-form' )</script> + <iframe src="https://www.facebook.com/plugins/like.php?href=http://atlas.apache.org/atlas-docs&send=false&layout=button_count&show-faces=false&action=like&colorscheme=dark"; + scrolling="no" frameborder="0" + style="border:none; width:100px; height:20px; margin-top: 10px;" class="pull-right" ></iframe> + <script type="text/javascript">asyncJs( 'https://apis.google.com/js/plusone.js' )</script> + <ul class="nav pull-right"><li style="margin-top: 10px;"> + <div class="g-plusone" data-href="http://atlas.apache.org/atlas-docs"; data-size="medium" width="60px" align="right" ></div> + </li></ul> + </div> + </div> + </div> + </div> + <div class="container"> + <div id="banner"> + <div class="pull-left"><a href=".." id="bannerLeft"><img src="images/atlas-logo.png" alt="Apache Atlas" width="200px" height="45px"/></a></div> + <div class="pull-right"></div> + <div class="clear"><hr/></div> + </div> + + <div id="breadcrumbs"> + <ul class="breadcrumb"> + <li class=""><a href="http://www.apache.org"; class="externalLink" title="Apache">Apache</a><span class="divider">/</span></li> + <li class=""><a href="index.html" title="Atlas">Atlas</a><span class="divider">/</span></li> + <li class="active ">Atlas Authorization Model</li> + <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2018-05-26</li> + <li id="projectVersion" class="pull-right">Version: 1.0.0-rc0</li> + </ul> + </div> + <div id="bodyColumn" > +<div class="section"> +<h3><a name="Atlas_Authorization_Model"></a>Atlas Authorization Model</h3></div> +<div class="section"> +<h4><a name="Introduction"></a>Introduction</h4> +<p>Atlas is a scalable and extensible set of core foundational governance services – enabling enterprises to effectively and efficiently meet their compliance requirements within Hadoop and allows integration with the whole enterprise data ecosystem. Apache Atlas provides open metadata management and governance capabilities for organizations to build a catalog of their data assets, classify and govern these assets and provide collaboration capabilities around these data assets for data scientists, analysts and the data governance team.</p> +<p>This document covers details of the authorization model supported by Apache Atlas to control access to metadata managed by Atlas.</p></div> +<div class="section"> +<h4><a name="Authorization_of_access_to_Types"></a>Authorization of access to Types</h4> +<p>Apache Atlas provides a type system that allows users to model the metadata objects they would like to manage. The model is composed of definitions called ‘types’. Apache Atlas type system supports following categories of types:</p> +<ul> +<li>Entity</li> +<li>Classification</li> +<li>Relationship</li> +<li>Struct</li> +<li>Enum</li></ul> +<p>The authorization model enables control of which users, groups can perform the following operations on types, based on type names and type categories:</p> +<ul> +<li>create</li> +<li>update</li> +<li>delete</li></ul> +<p>Here are few examples of access controls supported by the model:</p> +<ul> +<li>Admin users can create/update/delete types of all categories</li> +<li>Data stewards can create/update/delete classification types</li> +<li>Healthcare data stewards can create/update/delete types having names start with “hc”</li></ul></div> +<div class="section"> +<h4><a name="Authorization_of_access_to_Entities"></a>Authorization of access to Entities</h4> +<p>An entity is an instance of an entity-type and such instances represent objects in the real world – for example a table in Hive, a HDFS file, a Kafka topic. The authorization model enables control of which users, groups can perform the following operations on entities – based on entity-types, entity-classifications, entity-id:</p> +<p></p> +<ul> +<li>read</li> +<li>create</li> +<li>update</li> +<li>delete</li> +<li>read classification</li> +<li>add classification</li> +<li>update classification</li> +<li>remove classification</li></ul> +<p>Here are few examples of access controls supported by the model:</p> +<ul> +<li>Admin users can perform all entity operations on entities of all types</li> +<li>Data stewards can perform all entity operations, except delete, on entities of all types</li> +<li>Data quality admins can add/update/remove DATA_QUALITY classification</li> +<li>Users in specific groups can read/update entities with PII classification or its sub-classification</li> +<li>Finance users can read/update entities whose ID start with ‘finance’</li></ul></div> +<div class="section"> +<h4><a name="Authorization_of_Admin_operations"></a>Authorization of Admin operations</h4> +<p>The authorization model enables control of which users, groups can perform the following administrative operations:</p> +<ul> +<li>import entities</li> +<li>export entities</li></ul> +<p>Users with above accesses can import/export entities without requiring them to be granted with fine-grained entity level accesses.</p></div> +<div class="section"> +<h4><a name="Pluggable_Authorization"></a>Pluggable Authorization</h4> +<p>Apache Atlas supports a pluggable authorization interface, as shown below, that enable alternate implementations to handle authorizations.</p> +<p>The name of the class implementing the authorization interface can be registered with Apache Atlas using configuration <tt>atlas.authorizer.impl</tt>. When this property is not set, Apache Atlas will use its default implementation in <tt>org.apache.atlas.authorize.simple.AtlasSimpleAuthorizer</tt>.</p> +<div class="source"><pre class="prettyprint"> + +package org.apache.atlas.authorize; + +public interface AtlasAuthorizer { + void init(); + + void cleanUp(); + + boolean isAccessAllowed(AtlasAdminAccessRequest request) throws AtlasAuthorizationException; + + boolean isAccessAllowed(AtlasEntityAccessRequest request) throws AtlasAuthorizationException; + + boolean isAccessAllowed(AtlasTypeAccessRequest request) throws AtlasAuthorizationException; +} + +</pre></div></div> +<div class="section"> +<h4><a name="Simple_Authorizer"></a>Simple Authorizer</h4> +<p>Simple authorizer is the default authorizer implementation included in Apache Atlas. For details of setting up Apache Atlas to use simple authorizer, please see <a href="./Atlas-Authorization-Simple-Authorizer.html">Setting up Atlas to use Simple Authorizer</a></p></div> +<div class="section"> +<h4><a name="Ranger_Authorizer"></a>Ranger Authorizer</h4> +<p>To configure Apache Atlas to use authorization implementation provided by Apache Ranger, include the following property in application.properties config file:</p> +<div class="source"><pre class="prettyprint"> +atlas.authorizer.impl=ranger + +</pre></div> +<p>Apache Ranger Authorizer requires configuration files to be setup, for example to specify Apache Ranger admin server URL, name of the service containing authorization policies, etc. For more details please see, <a href="./Atlas-Authorization-Ranger-Authorizer.html">Setting up Atlas to use Ranger Authorizer</a>.</p></div> +<div class="section"> +<h4><a name="None_authorizer"></a>None authorizer</h4> +<p>In addition to the default authorizer, Apache Atlas includes an authorizer that permits all accesses to all users. This authorizer can be useful in test environments and unit tests. To use this authorizer, set the following configuration:</p> +<div class="source"><pre class="prettyprint"> +atlas.authorizer.impl=NONE + +</pre></div></div> + </div> + </div> + <hr/> + <footer> + <div class="container"> + <div class="row"> +<p><a href="https://www.apache.org/foundation/contributing";><img src="https://www.apache.org/images/SupportApache-small.png"; alt="Support the ASF" id="asf-logo" height="20" width="20" /></a>Copyright © 2011-2018 The Apache Software Foundation. Licensed under the <a href="https://www.apache.org/licenses/";>Apache License, Version 2.0</a>.<br/> +Apache Atlas, Atlas, Apache, the Apache feather logo are trademarks of the <a href="https://www.apache.org";>Apache Software Foundation</a>.<br/> +All other marks mentioned may be trademarks or registered trademarks of their respective owners.</p> + </div> + <p id="poweredBy" class="pull-right"><a href="http://maven.apache.org/"; title="Built by Maven" class="poweredBy"><img class="builtBy" alt="Built by Maven" src="./images/logos/maven-feather.png" /></a> +</p> + </div> + </footer> + </body> +</html> http://git-wip-us.apache.org/repos/asf/atlas-website/blob/e9346ee2/1.0.0-rc0/Atlas-Authorization-Ranger-Authorizer.html ---------------------------------------------------------------------- diff --git a/1.0.0-rc0/Atlas-Authorization-Ranger-Authorizer.html b/1.0.0-rc0/Atlas-Authorization-Ranger-Authorizer.html new file mode 100644 index 0000000..ff3ffdd --- /dev/null +++ b/1.0.0-rc0/Atlas-Authorization-Ranger-Authorizer.html @@ -0,0 +1,181 @@ +<!DOCTYPE html> +<!-- + | Generated by Apache Maven Doxia Site Renderer 1.8 from src/site/twiki/Atlas-Authorization-Ranger-Authorizer.twiki at 2018-05-26 + | Rendered using Apache Maven Fluido Skin 1.7 +--> +<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en"> + <head> + <meta charset="UTF-8" /> + <meta name="viewport" content="width=device-width, initial-scale=1.0" /> + <meta name="Date-Revision-yyyymmdd" content="20180526" /> + <meta http-equiv="Content-Language" content="en" /> + <title>Apache Atlas – Setting up Apache Atlas to use Apache Ranger Authorization</title> + <link rel="stylesheet" href="./css/apache-maven-fluido-1.7.min.css" /> + <link rel="stylesheet" href="./css/site.css" /> + <link rel="stylesheet" href="./css/print.css" media="print" /> + <script type="text/javascript" src="./js/apache-maven-fluido-1.7.min.js"></script> + </head> + <body class="topBarEnabled"> + <div id="topbar" class="navbar navbar-fixed-top "> + <div class="navbar-inner"> + <div class="container" style="width: 68%;"><div class="nav-collapse"> + <ul class="nav"> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Atlas <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="index.html" title="About">About</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS"; title="Wiki">Wiki</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS"; title="News">News</a></li> + <li><a href="https://git-wip-us.apache.org/repos/asf/atlas.git"; title="Git">Git</a></li> + <li><a href="https://issues.apache.org/jira/browse/ATLAS"; title="Jira">Jira</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS/PoweredBy"; title="Powered by">Powered by</a></li> + <li><a href="http://blogs.apache.org/atlas/"; title="Blog">Blog</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Project Information <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="project-info.html" title="Summary">Summary</a></li> + <li><a href="mail-lists.html" title="Mailing Lists">Mailing Lists</a></li> + <li><a href="http://webchat.freenode.net?channels=apacheatlas&uio=d4"; title="IRC">IRC</a></li> + <li><a href="team-list.html" title="Team">Team</a></li> + <li><a href="issue-tracking.html" title="Issue Tracking">Issue Tracking</a></li> + <li><a href="source-repository.html" title="Source Repository">Source Repository</a></li> + <li><a href="license.html" title="License">License</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Releases <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/1.0.0-alpha/"; title="1.0.0-alpha">1.0.0-alpha</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/1.0.0-rc0/"; title="1.0.0-rc0">1.0.0-rc0</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/0.8.2/"; title="0.8.2">0.8.2</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/0.8.1/"; title="0.8.1">0.8.1</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.8.0-incubating/"; title="0.8-incubating">0.8-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.7.1-incubating/"; title="0.7.1-incubating">0.7.1-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.7.0-incubating/"; title="0.7-incubating">0.7-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.6.0-incubating/"; title="0.6-incubating">0.6-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.5.0-incubating/"; title="0.5-incubating">0.5-incubating</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Documentation <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="../index.html" title="latest">latest</a></li> + <li><a href="../1.0.0-alpha/index.html" title="1.0.0-alpha">1.0.0-alpha</a></li> + <li><a href="../1.0.0-rc0/index.html" title="1.0.0-rc0">1.0.0-rc0</a></li> + <li><a href="../0.8.2/index.html" title="0.8.2">0.8.2</a></li> + <li><a href="../0.8.1/index.html" title="0.8.1">0.8.1</a></li> + <li><a href="../0.8.0-incubating/index.html" title="0.8-incubating">0.8-incubating</a></li> + <li><a href="../0.7.1-incubating/index.html" title="0.7.1-incubating">0.7.1-incubating</a></li> + <li><a href="../0.7.0-incubating/index.html" title="0.7-incubating">0.7-incubating</a></li> + <li><a href="../0.6.0-incubating/index.html" title="0.6-incubating">0.6-incubating</a></li> + <li><a href="../0.5.0-incubating/index.html" title="0.5-incubating">0.5-incubating</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">ASF <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="http://www.apache.org/foundation/how-it-works.html"; title="How Apache Works">How Apache Works</a></li> + <li><a href="https://www.apache.org/events/current-event"; title="Events">Events</a></li> + <li><a href="https://www.apache.org/licenses/"; title="License">License</a></li> + <li><a href="http://www.apache.org/foundation/"; title="Foundation">Foundation</a></li> + <li><a href="http://www.apache.org/foundation/sponsorship.html"; title="Sponsoring Apache">Sponsoring Apache</a></li> + <li><a href="http://www.apache.org/foundation/thanks.html"; title="Thanks">Thanks</a></li> + </ul> + </li> + </ul> +<form id="search-form" action="https://www.google.com/search"; method="get" class="navbar-search pull-right" > + <input value="http://atlas.apache.org"; name="sitesearch" type="hidden"/> + <input class="search-query" name="q" id="query" type="text" /> +</form> +<script type="text/javascript">asyncJs( 'https://cse.google.com/brand?form=search-form' )</script> + <iframe src="https://www.facebook.com/plugins/like.php?href=http://atlas.apache.org/atlas-docs&send=false&layout=button_count&show-faces=false&action=like&colorscheme=dark"; + scrolling="no" frameborder="0" + style="border:none; width:100px; height:20px; margin-top: 10px;" class="pull-right" ></iframe> + <script type="text/javascript">asyncJs( 'https://apis.google.com/js/plusone.js' )</script> + <ul class="nav pull-right"><li style="margin-top: 10px;"> + <div class="g-plusone" data-href="http://atlas.apache.org/atlas-docs"; data-size="medium" width="60px" align="right" ></div> + </li></ul> + </div> + </div> + </div> + </div> + <div class="container"> + <div id="banner"> + <div class="pull-left"><a href=".." id="bannerLeft"><img src="images/atlas-logo.png" alt="Apache Atlas" width="200px" height="45px"/></a></div> + <div class="pull-right"></div> + <div class="clear"><hr/></div> + </div> + + <div id="breadcrumbs"> + <ul class="breadcrumb"> + <li class=""><a href="http://www.apache.org"; class="externalLink" title="Apache">Apache</a><span class="divider">/</span></li> + <li class=""><a href="index.html" title="Atlas">Atlas</a><span class="divider">/</span></li> + <li class="active ">Setting up Apache Atlas to use Apache Ranger Authorization</li> + <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2018-05-26</li> + <li id="projectVersion" class="pull-right">Version: 1.0.0-rc0</li> + </ul> + </div> + <div id="bodyColumn" > +<div class="section"> +<h4><a name="Setting_up_Apache_Atlas_to_use_Apache_Ranger_Authorization"></a>Setting up Apache Atlas to use Apache Ranger Authorization</h4> +<p>As detailed in <a href="./Atlas-Authorization-Model.html">Atlas Authorization Model</a>, Apache Atlas supports pluggable authorization model. Apache Ranger provides an authorizer implementation that uses Apache Ranger policies for authorization. In addition, the authorizer provided by Apache Ranger audits all authorizations into a central audit store.</p></div> +<div class="section"> +<h5><a name="Configure_Apache_Atlas"></a>Configure Apache Atlas</h5> +<p>To configure Apache Atlas to use Apache Ranger authorizer, please follow the instructions given below:</p> +<p></p> +<ul> +<li>Include the following property in atlas-application.properties config file:</li></ul> +<div class="source"><pre class="prettyprint">atlas.authorizer.impl=ranger +</pre></div> +<p>If you use Apache Ambari to deploy Apache Atlas and Apache Ranger, enable Atlas plugin in configuration pages for Apache Ranger.</p> +<p></p> +<ul> +<li>Include libraries of Apache Ranger plugin in libext directory of Apache Atlas +<ul> +<li><tt><Atlas installation directory></tt>/libext/ranger-atlas-plugin-impl/</li> +<li><tt><Atlas installation directory></tt>/libext/ranger-atlas-plugin-shim-<version>.jar</li> +<li><tt><Atlas installation directory></tt>/libext/ranger-plugin-classloader-<version>.jar</li></ul></li></ul> +<p></p> +<ul> +<li>Include configuration files for Apache Ranger plugin in configuration directory of Apache Atlas - typically under /etc/atlas/conf directory. For more details on configuration file contents, please refer to appropriate documentation in Apache Ranger. +<ul> +<li><tt><Atlas configuration directory></tt>/ranger-atlas-audit.xml</li> +<li><tt><Atlas configuration directory></tt>/ranger-atlas-security.xml</li> +<li><tt><Atlas configuration directory></tt>/ranger-policymgr-ssl.xml</li> +<li><tt><Atlas configuration directory></tt>/ranger-security.xml</li></ul></li></ul></div> +<div class="section"> +<h5><a name="Apache_Ranger_authorization_policy_model_for_Apache_Atlas"></a>Apache Ranger authorization policy model for Apache Atlas</h5> +<p>Apache Ranger authorization policy model for Apache Atlas supports 3 resource hierarchies, to control access to: types, entities and admin operations. Following images show various details of each type of policy in Apache Ranger.</p> +<p></p> +<ul> +<li><b>Types</b></li></ul> +<p>Following authorization policy allows user 'admin' to create/update/delete any classification type. <p></p> <img alt="Apache Ranger policy for type operations" src="images/twiki/ranger-policy-types.png" width="800" style="border:1px solid black; margin-left:20px"></img></p><hr /> +<p></p> +<ul> +<li><b>Entity</b></li></ul> +<p>Following authorization policy allows user 'admin' perform all operations on metadata entities of Hive database named "my_db". <p></p> <img alt="Apache Ranger policy for entity operations" src="images/twiki/ranger-policy-entities.png" width="800" style="border:1px solid black; margin-left:20px"></img></p><hr /> +<p></p> +<ul> +<li><b>Admin Operations</b></li></ul>Following authorization policy allows user 'admin' to perform export/import admin operations. <p></p> <img alt="Apache Ranger policy for admin operations" src="images/twiki/ranger-policy-admin.png" width="800" style="border:1px solid black; margin-left:20px"></img><hr /></div> +<div class="section"> +<h5><a name="Apache_Ranger_access_audit_for_Apache_Atlas_authorizations"></a>Apache Ranger access audit for Apache Atlas authorizations</h5> +<p>Apache Ranger authorization plugin generates audit logs with details of the access authorized by the plugin. The details include the object accessed (eg. hive_table with ID cost_savings.claim_savings@cl1), type of access performed (eg. entity-add-classification, entity-remove-classification), name of the user, time of access and the IP address the access request came from - as shown in the following image.</p> +<p><img alt="Apache Ranger audit " src="images/twiki/ranger-audit.png" width="1000" style="border:1px solid black; margin-left:20px"></img></p></div> + </div> + </div> + <hr/> + <footer> + <div class="container"> + <div class="row"> +<p><a href="https://www.apache.org/foundation/contributing";><img src="https://www.apache.org/images/SupportApache-small.png"; alt="Support the ASF" id="asf-logo" height="20" width="20" /></a>Copyright © 2011-2018 The Apache Software Foundation. Licensed under the <a href="https://www.apache.org/licenses/";>Apache License, Version 2.0</a>.<br/> +Apache Atlas, Atlas, Apache, the Apache feather logo are trademarks of the <a href="https://www.apache.org";>Apache Software Foundation</a>.<br/> +All other marks mentioned may be trademarks or registered trademarks of their respective owners.</p> + </div> + <p id="poweredBy" class="pull-right"><a href="http://maven.apache.org/"; title="Built by Maven" class="poweredBy"><img class="builtBy" alt="Built by Maven" src="./images/logos/maven-feather.png" /></a> +</p> + </div> + </footer> + </body> +</html> http://git-wip-us.apache.org/repos/asf/atlas-website/blob/e9346ee2/1.0.0-rc0/Atlas-Authorization-Simple-Authorizer.html ---------------------------------------------------------------------- diff --git a/1.0.0-rc0/Atlas-Authorization-Simple-Authorizer.html b/1.0.0-rc0/Atlas-Authorization-Simple-Authorizer.html new file mode 100644 index 0000000..465791e --- /dev/null +++ b/1.0.0-rc0/Atlas-Authorization-Simple-Authorizer.html @@ -0,0 +1,266 @@ +<!DOCTYPE html> +<!-- + | Generated by Apache Maven Doxia Site Renderer 1.8 from src/site/twiki/Atlas-Authorization-Simple-Authorizer.twiki at 2018-05-26 + | Rendered using Apache Maven Fluido Skin 1.7 +--> +<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en"> + <head> + <meta charset="UTF-8" /> + <meta name="viewport" content="width=device-width, initial-scale=1.0" /> + <meta name="Date-Revision-yyyymmdd" content="20180526" /> + <meta http-equiv="Content-Language" content="en" /> + <title>Apache Atlas – Setting up Atlas to use Simple Authorizer</title> + <link rel="stylesheet" href="./css/apache-maven-fluido-1.7.min.css" /> + <link rel="stylesheet" href="./css/site.css" /> + <link rel="stylesheet" href="./css/print.css" media="print" /> + <script type="text/javascript" src="./js/apache-maven-fluido-1.7.min.js"></script> + </head> + <body class="topBarEnabled"> + <div id="topbar" class="navbar navbar-fixed-top "> + <div class="navbar-inner"> + <div class="container" style="width: 68%;"><div class="nav-collapse"> + <ul class="nav"> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Atlas <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="index.html" title="About">About</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS"; title="Wiki">Wiki</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS"; title="News">News</a></li> + <li><a href="https://git-wip-us.apache.org/repos/asf/atlas.git"; title="Git">Git</a></li> + <li><a href="https://issues.apache.org/jira/browse/ATLAS"; title="Jira">Jira</a></li> + <li><a href="https://cwiki.apache.org/confluence/display/ATLAS/PoweredBy"; title="Powered by">Powered by</a></li> + <li><a href="http://blogs.apache.org/atlas/"; title="Blog">Blog</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Project Information <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="project-info.html" title="Summary">Summary</a></li> + <li><a href="mail-lists.html" title="Mailing Lists">Mailing Lists</a></li> + <li><a href="http://webchat.freenode.net?channels=apacheatlas&uio=d4"; title="IRC">IRC</a></li> + <li><a href="team-list.html" title="Team">Team</a></li> + <li><a href="issue-tracking.html" title="Issue Tracking">Issue Tracking</a></li> + <li><a href="source-repository.html" title="Source Repository">Source Repository</a></li> + <li><a href="license.html" title="License">License</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Releases <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/1.0.0-alpha/"; title="1.0.0-alpha">1.0.0-alpha</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/1.0.0-rc0/"; title="1.0.0-rc0">1.0.0-rc0</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/0.8.2/"; title="0.8.2">0.8.2</a></li> + <li><a href="http://www.apache.org/dyn/closer.cgi/atlas/0.8.1/"; title="0.8.1">0.8.1</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.8.0-incubating/"; title="0.8-incubating">0.8-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.7.1-incubating/"; title="0.7.1-incubating">0.7.1-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.7.0-incubating/"; title="0.7-incubating">0.7-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.6.0-incubating/"; title="0.6-incubating">0.6-incubating</a></li> + <li><a href="http://archive.apache.org/dist/incubator/atlas/0.5.0-incubating/"; title="0.5-incubating">0.5-incubating</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">Documentation <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="../index.html" title="latest">latest</a></li> + <li><a href="../1.0.0-alpha/index.html" title="1.0.0-alpha">1.0.0-alpha</a></li> + <li><a href="../1.0.0-rc0/index.html" title="1.0.0-rc0">1.0.0-rc0</a></li> + <li><a href="../0.8.2/index.html" title="0.8.2">0.8.2</a></li> + <li><a href="../0.8.1/index.html" title="0.8.1">0.8.1</a></li> + <li><a href="../0.8.0-incubating/index.html" title="0.8-incubating">0.8-incubating</a></li> + <li><a href="../0.7.1-incubating/index.html" title="0.7.1-incubating">0.7.1-incubating</a></li> + <li><a href="../0.7.0-incubating/index.html" title="0.7-incubating">0.7-incubating</a></li> + <li><a href="../0.6.0-incubating/index.html" title="0.6-incubating">0.6-incubating</a></li> + <li><a href="../0.5.0-incubating/index.html" title="0.5-incubating">0.5-incubating</a></li> + </ul> + </li> + <li class="dropdown"> + <a href="#" class="dropdown-toggle" data-toggle="dropdown">ASF <b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="http://www.apache.org/foundation/how-it-works.html"; title="How Apache Works">How Apache Works</a></li> + <li><a href="https://www.apache.org/events/current-event"; title="Events">Events</a></li> + <li><a href="https://www.apache.org/licenses/"; title="License">License</a></li> + <li><a href="http://www.apache.org/foundation/"; title="Foundation">Foundation</a></li> + <li><a href="http://www.apache.org/foundation/sponsorship.html"; title="Sponsoring Apache">Sponsoring Apache</a></li> + <li><a href="http://www.apache.org/foundation/thanks.html"; title="Thanks">Thanks</a></li> + </ul> + </li> + </ul> +<form id="search-form" action="https://www.google.com/search"; method="get" class="navbar-search pull-right" > + <input value="http://atlas.apache.org"; name="sitesearch" type="hidden"/> + <input class="search-query" name="q" id="query" type="text" /> +</form> +<script type="text/javascript">asyncJs( 'https://cse.google.com/brand?form=search-form' )</script> + <iframe src="https://www.facebook.com/plugins/like.php?href=http://atlas.apache.org/atlas-docs&send=false&layout=button_count&show-faces=false&action=like&colorscheme=dark"; + scrolling="no" frameborder="0" + style="border:none; width:100px; height:20px; margin-top: 10px;" class="pull-right" ></iframe> + <script type="text/javascript">asyncJs( 'https://apis.google.com/js/plusone.js' )</script> + <ul class="nav pull-right"><li style="margin-top: 10px;"> + <div class="g-plusone" data-href="http://atlas.apache.org/atlas-docs"; data-size="medium" width="60px" align="right" ></div> + </li></ul> + </div> + </div> + </div> + </div> + <div class="container"> + <div id="banner"> + <div class="pull-left"><a href=".." id="bannerLeft"><img src="images/atlas-logo.png" alt="Apache Atlas" width="200px" height="45px"/></a></div> + <div class="pull-right"></div> + <div class="clear"><hr/></div> + </div> + + <div id="breadcrumbs"> + <ul class="breadcrumb"> + <li class=""><a href="http://www.apache.org"; class="externalLink" title="Apache">Apache</a><span class="divider">/</span></li> + <li class=""><a href="index.html" title="Atlas">Atlas</a><span class="divider">/</span></li> + <li class="active ">Setting up Atlas to use Simple Authorizer</li> + <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2018-05-26</li> + <li id="projectVersion" class="pull-right">Version: 1.0.0-rc0</li> + </ul> + </div> + <div id="bodyColumn" > +<div class="section"> +<h4><a name="Setting_up_Atlas_to_use_Simple_Authorizer"></a>Setting up Atlas to use Simple Authorizer</h4> +<p>As detailed in <a href="./Atlas-Authorization-Model.html">Atlas Authorization Model</a>, Apache Atlas supports a pluggable authorization model. Simple authorizer is the default authorizer implementation included in Apache Atlas. Simple authorizer uses policies defined in a JSON file. This document provides details of steps to configure Apache Atlas to use the simple authorizer and details of the JSON file format containing authorization policies.</p></div> +<div class="section"> +<h5><a name="Configure_Apache_Atlas"></a>Configure Apache Atlas</h5> +<p>To configure Apache Atlas to use simple authorizer, include the following properties in application.properties config file:</p> +<div class="source"><pre class="prettyprint"> +atlas.authorizer.impl=simple +atlas.authorizer.simple.authz.policy.file=/etc/atlas/conf/atlas-simple-authz-policy.json + +</pre></div> +<p>Please note that if the policy file location specified is not an absolute path, the file will be looked up in following paths:</p> +<ul> +<li>Apache Atlas configuration directory (specified by system property <tt>atlas.conf</tt>)</li> +<li>Apache Atlas server's current directory</li> +<li>CLASSPATH</li></ul></div> +<div class="section"> +<h5><a name="Policy_file_format"></a>Policy file format</h5> +<p>Simple authorizer uses <tt>roles</tt> to group permissions, which can then be assigned to users and user-groups. Following examples would help to understand the details of the policy file format:</p></div> +<div class="section"> +<h6><a name="Roles"></a>Roles</h6> +<p>Following policy file defines 3 roles:</p> +<ul> +<li>ROLE_ADMIN: has all permissions</li> +<li>PROD_READ_ONLY: has access to read entities having qualifiedName ending with "@prod"</li> +<li>TEST_ALL_ACCESS: has all access to entities having qualifiedName ending with "@test"</li></ul> +<p>Simple authorizer supports Java reg-ex to specify values for privilege/entity-type/entity-id/classification/typeName/typeCategory.</p> +<div class="source"><pre class="prettyprint"> +{ + "roles": { + "ROLE_ADMIN": { + "adminPermissions": [ + { + "privileges": [ ".*" ] + } + ], + + "entityPermissions": [ + { + "privileges": [ ".*" ], + "entityTypes": [ ".*" ], + "entityIds": [ ".*" ], + "classifications": [ ".*" ] + } + ], + + "typePermissions": [ + { + "privileges": [ ".*" ], + "typeCategories": [ ".*" ], + "typeNames": [ ".*" ] + } + ] + }, + + "PROD_READ_ONLY" : { + "entityPermissions": [ + { + "privileges": [ "entity-read", "entity-read-classification" ], + "entityTypes": [ ".*" ], + "entityIds": [ ".*@prod" ], + "classifications": [ ".*" ] + } + } + + "TEST_ALL_ACCESS" : { + "entityPermissions": [ + { + "privileges": [ ".*" ], + "entityTypes": [ ".*" ], + "entityIds": [ ".*@test" ], + "classifications": [ ".*" ] + } + } + }, + + "userRoles": { + ... + }, + + "groupRoles": { + ... + } +} + + +</pre></div></div> +<div class="section"> +<h6><a name="Assign_Roles_to_Users_and_User_Groups"></a>Assign Roles to Users and User Groups</h6> +<p>Roles defined above can be assigned (granted) to users as shown below:</p> +<div class="source"><pre class="prettyprint"> +{ + "roles": { + ... + }, + + "userRoles": { + "admin": [ "ROLE_ADMIN" ], + "steward": [ "DATA_STEWARD" ], + "user1": [ "PROD_READ_ONLY" ], + "user2": [ "TEST_ALL_ACCESS" ], + "user3": [ "PROD_READ_ONLY", "TEST_ALL_ACCESS" ], + }, + + "groupRoles": { + ... + } +} + +</pre></div> +<p>Roles can be assigned (granted) to user-groups as shown below. An user can belong to multiple groups; roles assigned to all groups the user belongs to will be used to authorize the access.</p> +<div class="source"><pre class="prettyprint"> +{ + "roles": { + ... + }, + + "userRoles": { + ... + }, + + "groupRoles": { + "admins": [ "ROLE_ADMIN" ], + "dataStewards": [ "DATA_STEWARD" ], + "testUsers": [ "TEST_ALL_ACCESS" ], + "prodReadUsers": [ "PROD_READ_ONLY" ] + } +} + +</pre></div></div> + </div> + </div> + <hr/> + <footer> + <div class="container"> + <div class="row"> +<p><a href="https://www.apache.org/foundation/contributing";><img src="https://www.apache.org/images/SupportApache-small.png"; alt="Support the ASF" id="asf-logo" height="20" width="20" /></a>Copyright © 2011-2018 The Apache Software Foundation. Licensed under the <a href="https://www.apache.org/licenses/";>Apache License, Version 2.0</a>.<br/> +Apache Atlas, Atlas, Apache, the Apache feather logo are trademarks of the <a href="https://www.apache.org";>Apache Software Foundation</a>.<br/> +All other marks mentioned may be trademarks or registered trademarks of their respective owners.</p> + </div> + <p id="poweredBy" class="pull-right"><a href="http://maven.apache.org/"; title="Built by Maven" class="poweredBy"><img class="builtBy" alt="Built by Maven" src="./images/logos/maven-feather.png" /></a> +</p> + </div> + </footer> + </body> +</html>
![https://www.apache.org/images/SupportApache-small.png"](https://www.apache.org/images/SupportApache-small.png"){kind=link}