[jira] [Created] (RANGER-1887) serviceDef.getResources().get(0).getName(); case IndexOutOfBoundsException in RangerServiceTag.class And print error in RangerServiceStorm

2017-11-13 Thread Qiang Zhang (JIRA)
Qiang Zhang created RANGER-1887: --- Summary: serviceDef.getResources().get(0).getName(); case IndexOutOfBoundsException in RangerServiceTag.class And print error in RangerServiceStorm Key: RANGER-1887 URL: https://

[jira] [Reopened] (RANGER-1860) Provide a new service interface prompt function framework to resolved the defect of the current service interface, increase the flexibility of the function, improve use

2017-11-13 Thread Nitin Galave (JIRA)
[ https://issues.apache.org/jira/browse/RANGER-1860?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Nitin Galave reopened RANGER-1860: -- > Provide a new service interface prompt function framework to resolved the > defect of the curren

[jira] [Commented] (RANGER-1860) Provide a new service interface prompt function framework to resolved the defect of the current service interface, increase the flexibility of the function, improve us

2017-11-13 Thread Nitin Galave (JIRA)
[ https://issues.apache.org/jira/browse/RANGER-1860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16250867#comment-16250867 ] Nitin Galave commented on RANGER-1860: -- [~zhangqiang2] Can you handle the same scena

Review Request 63785: RANGER-1884 : Default Policy is not created for Ranger KMS and Tag service

2017-11-13 Thread bhavik patel
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/63785/ --- Review request for ranger, Ankita Sinha, Don Bosco Durai, Gautam Borad, Abhay Ku

[jira] [Updated] (RANGER-1884) Default Policy is not created for Ranger KMS and Tag service

2017-11-13 Thread bhavik patel (JIRA)
[ https://issues.apache.org/jira/browse/RANGER-1884?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] bhavik patel updated RANGER-1884: - Attachment: RANGER-1884.patch > Default Policy is not created for Ranger KMS and Tag service > --

[jira] [Created] (RANGER-1886) TagSync updates for the changes in Atlas API

2017-11-13 Thread Madhan Neethiraj (JIRA)
Madhan Neethiraj created RANGER-1886: Summary: TagSync updates for the changes in Atlas API Key: RANGER-1886 URL: https://issues.apache.org/jira/browse/RANGER-1886 Project: Ranger Issue T

[jira] [Commented] (RANGER-1643) Handle multiple comma in credentials ...

2017-11-13 Thread Endre Kovacs (JIRA)
[ https://issues.apache.org/jira/browse/RANGER-1643?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16249714#comment-16249714 ] Endre Kovacs commented on RANGER-1643: -- you are right [~bpatel], i'll do proceed wit

Re: Review Request 63700: [RANGER-1881] Reduce code duplication in kms, where the console handling code is repeated 4 times.

2017-11-13 Thread Colm O hEigeartaigh
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/63700/#review190819 --- Ship it! Ship It! - Colm O hEigeartaigh On Nov. 9, 2017, 1:4

Review Request 63756: RANGER-1738 - RangerYarnAuthorizer not compatible with Hadoop-3.0.0

2017-11-13 Thread Colm O hEigeartaigh
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/63756/ --- Review request for ranger. Bugs: RANGER-1738 https://issues.apache.org/jira

[jira] [Updated] (RANGER-1738) RangerYarnAuthorizer not compatible with Hadoop-3.0.0

2017-11-13 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/RANGER-1738?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated RANGER-1738: Attachment: 0001-RANGER-1738-RangerYarnAuthorizer-not-compatible-with.patch A patch

Re: Feedback request for https://reviews.apache.org/r/56094/

2017-11-13 Thread Colm O hEigeartaigh
Hi Madhan, Just a follow up on this issue. I was thinking the easiest way to solve it is to follow your first suggestion to remove the implied grant. However, the problem is that this implied grant exists in Yarn itself. So if "alice" is granted the "administer queue" permission only, she can stil

[jira] [Closed] (RANGER-1339) DENY and ALLOW EXCLUSION do not work with YARN

2017-11-13 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/RANGER-1339?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed RANGER-1339. --- > DENY and ALLOW EXCLUSION do not work with YARN > --

[jira] [Resolved] (RANGER-1339) DENY and ALLOW EXCLUSION do not work with YARN

2017-11-13 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/RANGER-1339?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved RANGER-1339. - Resolution: Won't Fix See https://issues.apache.org/jira/browse/RANGER-1885 inst

[jira] [Created] (RANGER-1885) Remove implied grant for the administer queue permission for the Yarn plugin

2017-11-13 Thread Colm O hEigeartaigh (JIRA)
Colm O hEigeartaigh created RANGER-1885: --- Summary: Remove implied grant for the administer queue permission for the Yarn plugin Key: RANGER-1885 URL: https://issues.apache.org/jira/browse/RANGER-1885

Re: Review Request 56094: Ranger-1339: DENY and ALLOW EXCLUSION do not work with YARN

2017-11-13 Thread Colm O hEigeartaigh
> On Nov. 10, 2017, 7:43 a.m., Madhan Neethiraj wrote: > > I think the special handling of implied grants of "ALL", in deny and > > allow-exceptions, would be confusing. Currently Ranger policy model treats > > all access-types the same - there is no special treatment for "ALL". Also, > > the