You may provide additional options when creating a Ranger policy using the context (of type HttpServletRequest). One of the options (ServiceREST.PARAM_MERGE_IF_EXISTS) merges any existing policy with the provided Ranger policy.
Thanks, -Abhay On Tue, Oct 13, 2020 at 10:33 AM Elliot West <tea...@gmail.com> wrote: > Hello, > > I note that one can only declare one resource policy per set of unique > resource qualifiers. In practice, this means that one may need to either > create a new policy or update an existing policy when trying to implement a > new access control change depending on what policies have already been > defined in the service. > > This makes it challenging to implement automated policy deployment > pipelines as such a system would first need to determine existing state and > then create or merge update accordingly. > > I was wondering if the ranger rest api already provides the ability to > merge policies? > > Thanks, > > Elliot. >
