[jira] [Comment Edited] (RANGER-4389) extend ABAC to use few internal attributes of users and groups, like syncSource, isInternal, emailAddress

[Himanshu Maurya (Jira)]

    [ 
https://issues.apache.org/jira/browse/RANGER-4389?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17815621#comment-17815621
 ] 

Himanshu Maurya edited comment on RANGER-4389 at 2/8/24 10:47 AM:
------------------------------------------------------------------

Hi [~madhan],

It will be really helpful if you can kindly share the syntax for using these 
three internal attributes in the Ranger ABAC policy under policy conditions and 
row level filter

Thanks and Regards


was (Author: JIRAUSER298460):
Hi [~madhan],

It will be really helpful if you can kindly share the syntax for using these 
attributes in the Ranger ABAC policy under policy conditions and row level 
filter

Thanks and Regards

> extend ABAC to use few internal attributes of users and groups, like 
> syncSource, isInternal, emailAddress
> ---------------------------------------------------------------------------------------------------------
>
>                 Key: RANGER-4389
>                 URL: https://issues.apache.org/jira/browse/RANGER-4389
>             Project: Ranger
>          Issue Type: Improvement
>          Components: Ranger
>            Reporter: Madhan Neethiraj
>            Assignee: Madhan Neethiraj
>            Priority: Major
>             Fix For: 3.0.0
>
>         Attachments: RANGER-4389.patch
>
>
> Ranger ABAC allows access/masking/row-filtering policies to be setup based on 
> attributes of users and groups. It will help to make following internal 
> attributes available for use in ABAC policies:
>  * syncSource
>  * isInternal
>  * emailAddress
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)