I think, either will need you to update the Knox’s authorization interface. Please note, Ranger Plugin just implements the interface provided by the host process, in this case Knox.
Have you posted the same question the Knox’s mailing list? Thanks Bosco From: Ebrahim Khalil Abbasi <ebrahim.khalil.abb...@gmail.com> Reply-To: <user@ranger.apache.org> Date: Tuesday, December 8, 2020 at 1:40 AM To: <user@ranger.apache.org> Subject: Re: Method Level Authorization for Knox There is no suggestion what I should do? On Wed, Dec 2, 2020 at 9:18 AM Ebrahim Khalil Abbasi <ebrahim.khalil.abb...@gmail.com> wrote: Hi, My problem is there. Some suggested me to change the current existing knox plugin and improve it to support the method level authorization, so no integration required. Another proposed solution is to configure the Apache knox so that in addition to the Ranger's knox pluging also use my HTTP service plugin in the chain of authorization process. I am not sure the second solution is easy to implement. On Wed, Dec 2, 2020 at 5:45 AM Velmurugan Periasamy <v...@apache.org> wrote: Hi - can you please elaborate on how you are planning to integrate with the existing Knox plugin? On Tue, Dec 1, 2020 at 12:16 AM Ebrahim Khalil Abbasi <ebrahim.khalil.abb...@gmail.com> wrote: Hi there, I am using knox to access livy to manage spark sessions. To implement authorization I want to provide the method level (get/post/delete/...) authorization. I implemented a new HTTP Service plugin in Ranger but I need to integrate it to the Ranger's knox plugin so that each HTTP request to the knox is authorized based on the method by the Ranger. Thanks for your any help! Ebrahim
