[
https://issues.apache.org/jira/browse/RANGER-5393?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Madhan Neethiraj reassigned RANGER-5393:
----------------------------------------
Assignee: Madhan Neethiraj
> Ranger Ozone authorizer updates to support AssumeRole
> -----------------------------------------------------
>
> Key: RANGER-5393
> URL: https://issues.apache.org/jira/browse/RANGER-5393
> Project: Ranger
> Issue Type: Improvement
> Components: plugins
> Reporter: Madhan Neethiraj
> Assignee: Madhan Neethiraj
> Priority: Major
> Time Spent: 40m
> Remaining Estimate: 0h
>
> Ozone authorizer interface, IAccessAuthorizer, is being enhanced in
> HDDS-13848 to support AssumeRole operation. Ranger implementaton of
> IAccessAuthorizer should be updated to support authorizing the new operation.
> This will require following enhancements in Ranger:
> # add new access type ASSUME_ROLE to service-def. A Java patch to update the
> service-def in existing deployments
> # enhance policy engine to support in-line policy, allowing Ozone plugin to
> provide details of accesss to be granted in an evaluation request, in
> addition to accesses granted by Ranger policies (RANGER-5369).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
