[
https://issues.apache.org/jira/browse/RANGER-4970?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Madhan Neethiraj updated RANGER-4970:
-------------------------------------
Attachment: RANGER-4970.patch
> Condition to support validity schedule
> --------------------------------------
>
> Key: RANGER-4970
> URL: https://issues.apache.org/jira/browse/RANGER-4970
> Project: Ranger
> Issue Type: Improvement
> Components: admin, plugins
> Reporter: Madhan Neethiraj
> Assignee: Madhan Neethiraj
> Priority: Major
> Fix For: 3.0.0, 2.6.0
>
> Attachments: RANGER-4970.patch
>
>
> Ranger policy model currently supports validity schedule at the policy level,
> which allows a policy author to allow/deny permissions for specific time
> periods. This should be extended at policy-item level, so that permissions
> call be allowed/denied for individual principals for a specific time periods.
> RANGER-3815 asked for this enhancement, which was addressed with introduction
> of macros. However, supporting validity schedule, similar to the one at
> policy level, will make it consistent.
>
> Custom conditions supported by Ranger policy model can be extended to provide
> this functionality, by adding a condition that takes validity schedule as the
> input. Policy UI can be enhanced to provide the same experience for policy
> items as at the policy level.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
