Colm,

These 2 actions were excluded from authorization in RANGER-557 – to make Ranger 
authorizer consistent with default authorizer.

I think these can removed from Admin UI (ranger-servicedef-storm.json).

Thanks,
Madhan


On 7/5/16, 1:04 PM, "Balaji Ganesan" <bgane...@apache.org> wrote:

Colm, thanks for bringing this to attention.

Should we work with the Storm community to provide authorization to these 2
actions or should we remove it from Ranger support ?


On Mon, Jul 4, 2016 at 11:05 AM, Colm O hEigeartaigh <cohei...@apache.org>
wrote:

> Hi,
>
> The RangerStormAuthorizer does no authorization checking on "getNimbusConf"
> and "getClusterInfo". However, the option to select these permissions still
> appears in the Admin UI. Should we remove these permissions from the UI to
> avoid giving the false impression that we support authorization for them?
>
> Colm.
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>



Reply via email to