----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/73266/#review222836 -----------------------------------------------------------
Ship it! Ship It! - Mehul Parikh On April 19, 2021, 2:46 p.m., Bhagyashri Kokate wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/73266/ > ----------------------------------------------------------- > > (Updated April 19, 2021, 2:46 p.m.) > > > Review request for ranger, Dhaval Rajpara, Dhaval Shah, Dineshkumar Yadav, > Gautam Borad, Jayendra Parab, Kishor Gollapalliwar, Mateen Mansoori, Mehul > Parikh, Pradeep Agrawal, and Ramesh Mani. > > > Bugs: RANGER-3229 > https://issues.apache.org/jira/browse/RANGER-3229 > > > Repository: ranger > > > Description > ------- > > When creating a policy for delegation token, only 'describe' permission is > allowed by UI. > > But the default policy created for "all - delegationtoken" contains a policy > item for rangerlookup user with "consume". > > > Diffs > ----- > > > plugin-kafka/src/main/java/org/apache/ranger/services/kafka/RangerServiceKafka.java > 4e7163a02 > > > Diff: https://reviews.apache.org/r/73266/diff/2/ > > > Testing > ------- > > Testing summary: > > Policy Name: all - delegationtoken > Allow Condition permissions for rangerlookup user: describe > > Policy Name: all - transactionalid > Allow Condition permissions for rangerlookup user: describe > > Policy Name: all - cluster > Allow Condition permissions for rangerlookup user: describe > > > Thanks, > > Bhagyashri Kokate > >