Re: [DISCUSS] Policy model enhancement to support deny-conditions and exceptions

2015-10-15 Thread Balaji Ganesan
<> That is the concern here. How can we expect Administrators to ensure they are keeping policies in sync between high level and lower level resources? The use case is Scott and finance group should get access while everyone else in intern group should. The intern group is part of the finance grou

Re: [DISCUSS] Policy model enhancement to support deny-conditions and exceptions

2015-10-15 Thread Don Bosco Durai
>Allow and Deny in the same policy and deduce that user "Scott" can access the >resource while anyone else in group "interns" is denied to access the >resource. The policy creation in the UI is much simpler than having to specify >"Scott" as an exception to Deny and then specifying "Scott" for A

Re: [DISCUSS] Policy model enhancement to support deny-conditions and exceptions

2015-10-15 Thread Dilli Dorai
Do we have a realistic customer asking for exception on Deny set? On Thu, Oct 15, 2015 at 10:32 AM, Balaji Ganesan wrote: > I think we completely missed my earlier point. My question was around > whether we need to have exceptions in Deny and Allow beyond just Allow or > Deny policy items. I us

Layout and reorganization of Ranger Wiki pages

2015-10-15 Thread Alok Lal
Per @Bosco’s suggestion I am forking off the discussion about re-org of Ranger pages started by Balaji into this new thread (hence the change of subject field). Please chime in with your thoughts. On 10/15/15, 10:25 AM, "Don Bosco Durai" wrote: >We should probably start another thread to di

Re: Issue while enabling hbase plugin

2015-10-15 Thread Aneela Saleem
yes it was just because of permissions. I had to give full permissions on hbase directory in hdfs to allow root and hbase user to perform necessary operations on it. On Thu, Oct 15, 2015 at 10:20 PM, Don Bosco Durai wrote: > Based on your other email, it seems you get Hbase plugin installed > pr

Re: [DISCUSS] Policy model enhancement to support deny-conditions and exceptions

2015-10-15 Thread Balaji Ganesan
I think we completely missed my earlier point. My question was around whether we need to have exceptions in Deny and Allow beyond just Allow or Deny policy items. I used the MSFT example to see if they have implemented exceptions to Deny, which I did not find any. I am not suggesting that we ask th

Re: Issue while enabling hbase plugin

2015-10-15 Thread Don Bosco Durai
Based on your other email, it seems you get Hbase plugin installed properly. Was it just the permission or you had to do anything more? Thanks Bosco From: Don Bosco Durai Reply-To: Date: Sunday, October 11, 2015 at 9:47 PM To: Subject: Re: Issue while enabling hbase plugin Seems this d

Re: Review audit to Azure documentation

2015-10-15 Thread Don Bosco Durai
We should probably start another thread to discuss the organization of the documents. I feel, we should have a central page to link to all the different documents. This central page can be organized the we want to. Thanks Bosco From: Alok Lal Reply-To: Date: Wednesday, October 14, 2015 at

Re: Testing policies on hbase columns

2015-10-15 Thread Aneela Saleem
yes it worked for me :) On Wed, Oct 14, 2015 at 10:46 PM, Don Bosco Durai wrote: > Did it work for you? > > Thanks > > Bosco > > > From: Aneela Saleem > Reply-To: > Date: Wednesday, October 14, 2015 at 12:48 AM > To: > Subject: Re: Testing policies on hbase columns > > Thanks Bosco! > > On Wed