[
https://issues.apache.org/jira/browse/RANGER-5370?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18029800#comment-18029800
]
Madhan Neethiraj commented on RANGER-5370:
------------------------------------------
{quote}GDS request when denied
{quote}
[~rmani] - GDS allows resources to be shared with curated datasets; they don't
support policies to deny access to resources. So "GDS request when denied" is
not correct.
{quote}because of inactive status of the DataSet should have data share details.
{quote}
A resource may not be part of a dataset due to any of the following reasons:
* shared resource is disabled or expired
* data share of the resource is disabled or expired
* status of the data share in dataset is not active or expired
* dataset is disabled or expired
Which of above should be recorded in the audit log? Note that a resource can be
part of multiple data shares and datasets. I don't think audit log should
record details of disabled or expired objects; that will be like asking to
include details of disabled/expired policies/tags in audit logs.
> GDS request when denied because of inactive status of the DataSet should have
> data share details
> ------------------------------------------------------------------------------------------------
>
> Key: RANGER-5370
> URL: https://issues.apache.org/jira/browse/RANGER-5370
> Project: Ranger
> Issue Type: Improvement
> Components: Ranger
> Affects Versions: 3.0.0
> Reporter: Ramesh Mani
> Assignee: Ramesh Mani
> Priority: Minor
> Time Spent: 20m
> Remaining Estimate: 0h
>
> GDS request when denied because of inactive status of the DataSet should have
> data share details. This will help in filtering audits by data share whether
> its denied or allowed.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
