Dhaval B. SHAH created RANGER-2650:
--------------------------------------

             Summary: Public group should not be given access to all kafka 
resources in default ranger policies
                 Key: RANGER-2650
                 URL: https://issues.apache.org/jira/browse/RANGER-2650
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
            Reporter: Dhaval B. SHAH
            Assignee: Dhaval B. SHAH


If authentication type is simple, we do add public group to default policy 
item.  Any user setting up Ranger in simple mode and after that enabling 
Kerberos on that cluster will have this extra policy providing public group all 
permissions on Kafka. 

We should be adding public group to default policies neither is simple mode nor 
in kerberos.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to