Madhan Neethiraj created RANGER-5393:
----------------------------------------

             Summary: Ranger Ozone authorizer updates to support AssumeRole
                 Key: RANGER-5393
                 URL: https://issues.apache.org/jira/browse/RANGER-5393
             Project: Ranger
          Issue Type: Improvement
          Components: plugins
            Reporter: Madhan Neethiraj


Ozone authorizer interface, IAccessAuthorizer, is being enhanced in HDDS-13848 
to support AssumeRole operation. Ranger implementaton of IAccessAuthorizer 
should be updated to support authorizing the new operation. This will require 
following enhancements in Ranger:
 # add new access type ASSUME_ROLE to service-def. A Java patch to update the 
service-def in existing deployments

 # enhance policy engine to support in-line policy, allowing Ozone plugin to 
provide details of accesss to be granted in an evaluation request, in addition 
to accesses granted by Ranger policies (RANGER-5369).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to