[jira] [Commented] (RANGER-2584) Disable deny and exceptions in policies for NiFi
[ https://issues.apache.org/jira/browse/RANGER-2584?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16947092#comment-16947092 ] Madhan Neethiraj commented on RANGER-2584: -- +1 for the patch. Thanks [~bbende]! > Disable deny and exceptions in policies for NiFi > > > Key: RANGER-2584 > URL: https://issues.apache.org/jira/browse/RANGER-2584 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Bryan Bende >Priority: Minor > Fix For: 2.1.0 > > Attachments: > 0001-RANGER-2584-Disable-deny-and-exception-in-policies-f.patch > > > NiFi's policies are effectively whitelisting allowed users and groups. NiFi > puts forth a best effort to map Ranger policy model into NiFi policy model. > We should attempt to align these by disabling deny and exceptions in policies. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (RANGER-2584) Disable deny and exceptions in policies for NiFi
[ https://issues.apache.org/jira/browse/RANGER-2584?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16947039#comment-16947039 ] Bryan Bende commented on RANGER-2584: - [~madhan] thanks for taking a look... yes we are ok with that, we would just like it changed for new installs going forward. > Disable deny and exceptions in policies for NiFi > > > Key: RANGER-2584 > URL: https://issues.apache.org/jira/browse/RANGER-2584 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Bryan Bende >Priority: Minor > Fix For: 2.1.0 > > Attachments: > 0001-RANGER-2584-Disable-deny-and-exception-in-policies-f.patch > > > NiFi's policies are effectively whitelisting allowed users and groups. NiFi > puts forth a best effort to map Ranger policy model into NiFi policy model. > We should attempt to align these by disabling deny and exceptions in policies. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (RANGER-2584) Disable deny and exceptions in policies for NiFi
[ https://issues.apache.org/jira/browse/RANGER-2584?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16946996#comment-16946996 ] Madhan Neethiraj commented on RANGER-2584: -- [~bbende] - the update looks good. However, note that the fix will not impact Ranger instances that already have nifi service-def; this will work for new Ranger instances and Ranger instances that didn't have nifi service-def. > Disable deny and exceptions in policies for NiFi > > > Key: RANGER-2584 > URL: https://issues.apache.org/jira/browse/RANGER-2584 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Bryan Bende >Priority: Minor > Fix For: 2.1.0 > > Attachments: > 0001-RANGER-2584-Disable-deny-and-exception-in-policies-f.patch > > > NiFi's policies are effectively whitelisting allowed users and groups. NiFi > puts forth a best effort to map Ranger policy model into NiFi policy model. > We should attempt to align these by disabling deny and exceptions in policies. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (RANGER-2584) Disable deny and exceptions in policies for NiFi
[ https://issues.apache.org/jira/browse/RANGER-2584?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16943612#comment-16943612 ] Velmurugan Periasamy commented on RANGER-2584: -- Thanks [~mcgilman] and [~bbende]. Please provide patch in review board. Thanks. > Disable deny and exceptions in policies for NiFi > > > Key: RANGER-2584 > URL: https://issues.apache.org/jira/browse/RANGER-2584 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Bryan Bende >Priority: Minor > > NiFi's policies are effectively whitelisting allowed users and groups. NiFi > puts forth a best effort to map Ranger policy model into NiFi policy model. > We should attempt to align these by disabling deny and exceptions in policies. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (RANGER-2584) Disable deny and exceptions in policies for NiFi
[ https://issues.apache.org/jira/browse/RANGER-2584?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16943606#comment-16943606 ] Bryan Bende commented on RANGER-2584: - I'll work on this. > Disable deny and exceptions in policies for NiFi > > > Key: RANGER-2584 > URL: https://issues.apache.org/jira/browse/RANGER-2584 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Assignee: Bryan Bende >Priority: Minor > > NiFi's policies are effectively whitelisting allowed users and groups. NiFi > puts forth a best effort to map Ranger policy model into NiFi policy model. > We should attempt to align these by disabling deny and exceptions in policies. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (RANGER-2584) Disable deny and exceptions in policies for NiFi
[ https://issues.apache.org/jira/browse/RANGER-2584?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16934654#comment-16934654 ] Matt Gilman commented on RANGER-2584: - I'm happy to supply the PR for this effort. > Disable deny and exceptions in policies for NiFi > > > Key: RANGER-2584 > URL: https://issues.apache.org/jira/browse/RANGER-2584 > Project: Ranger > Issue Type: Improvement > Components: plugins >Reporter: Matt Gilman >Priority: Minor > > NiFi's policies are effectively whitelisting allowed users and groups. NiFi > puts forth a best effort to map Ranger policy model into NiFi policy model. > We should attempt to align these by disabling deny and exceptions in policies. -- This message was sent by Atlassian Jira (v8.3.4#803005)
