Madhan Neethiraj created RANGER-5814:
----------------------------------------
Summary: application-type should be made available in policy
conditions
Key: RANGER-5814
URL: https://issues.apache.org/jira/browse/RANGER-5814
Project: Ranger
Issue Type: Improvement
Components: plugins
Reporter: Madhan Neethiraj
Assignee: Madhan Neethiraj
Condition expressions in policies can refer to various attributes available in
the request context, such as:
- {{clientType}}: the type of the client that accesed the resource
- {{clusterType}}: the type of the cluster in which the service is deployed in
- onprem, cloud, cleanroom
- {{clusterName}}: the name of the cluster in which the service is deployed in
- prod, test, analyst, etc
These attributes can be referenced policies, as shown below, to grant/deny
accesses on specific criteria:
- {{REQ.clusterName == 'etl'}}
- {{REQ.clientType == 'cli'}}
Application type, that represents the type of the application/service that
serves the accessed resource (for example: HiveServer2, Impala, Trino) should
be made available in the request context - so that policies can be setup to
grant/deny accesses based on the application type.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
