This is an automated email from the ASF dual-hosted git repository. mehul pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/ranger.git
commit f5b8481ecc7c45fd181670cc29752a053ed8a30e Author: BHAGYASHRI KOKATE <bhagyashri.kok...@freestoneinfotech.com> AuthorDate: Tue Apr 6 10:04:32 2021 +0530 RANGER-3229: Correct Kafka default policy item for all-delegation token and rangerlookup user Signed-off-by: Mehul Parikh <me...@apache.org> --- .../java/org/apache/ranger/services/kafka/RangerServiceKafka.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/plugin-kafka/src/main/java/org/apache/ranger/services/kafka/RangerServiceKafka.java b/plugin-kafka/src/main/java/org/apache/ranger/services/kafka/RangerServiceKafka.java index 4e7163a..836acd9 100644 --- a/plugin-kafka/src/main/java/org/apache/ranger/services/kafka/RangerServiceKafka.java +++ b/plugin-kafka/src/main/java/org/apache/ranger/services/kafka/RangerServiceKafka.java @@ -41,7 +41,7 @@ import static org.apache.ranger.plugin.policyengine.RangerPolicyEngine.GROUP_PUB public class RangerServiceKafka extends RangerBaseService { private static final Log LOG = LogFactory.getLog(RangerServiceKafka.class); - public static final String ACCESS_TYPE_CONSUME = "consume"; + public static final String ACCESS_TYPE_DESCRIBE = "describe"; public RangerServiceKafka() { super(); @@ -129,7 +129,7 @@ public class RangerServiceKafka extends RangerBaseService { RangerPolicyItem policyItemForLookupUser = new RangerPolicyItem(); policyItemForLookupUser.setUsers(Collections.singletonList(lookUpUser)); policyItemForLookupUser.setAccesses(Collections.singletonList( - new RangerPolicyItemAccess(ACCESS_TYPE_CONSUME))); + new RangerPolicyItemAccess(ACCESS_TYPE_DESCRIBE))); policyItemForLookupUser.setDelegateAdmin(false); defaultPolicy.getPolicyItems().add(policyItemForLookupUser); }