[ https://issues.apache.org/jira/browse/NIFI-5542?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16595487#comment-16595487 ]
ASF GitHub Bot commented on NIFI-5542: -------------------------------------- Github user kevdoran commented on a diff in the pull request: https://github.com/apache/nifi/pull/2970#discussion_r213438246 --- Diff: nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-file-authorizer/src/main/java/org/apache/nifi/authorization/FileAccessPolicyProvider.java --- @@ -114,6 +114,7 @@ private static JAXBContext initializeJaxbContext(final String contextPath) { static final String WRITE_CODE = "W"; static final String PROP_NODE_IDENTITY_PREFIX = "Node Identity "; + static final String PROP_NODE_GROUP = "Node Group"; --- End diff -- The [Admin Guide](https://github.com/apache/nifi/blob/master/nifi-docs/src/main/asciidoc/administration-guide.adoc#fileaccesspolicyprovider) and default [authorizers.xml](https://github.com/apache/nifi/blob/master/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-resources/src/main/resources/conf/authorizers.xml) file should be updated to include this property and its usage. > Add support for node groups to FileAccessPolicyProvider > ------------------------------------------------------- > > Key: NIFI-5542 > URL: https://issues.apache.org/jira/browse/NIFI-5542 > Project: Apache NiFi > Issue Type: Improvement > Reporter: Andrew Christianson > Priority: Major > > Currently in FileAccessPolicyProvider, it is possible to specify a set of > node identities, which are given access to /proxy. This works well for static > clusters, but does not work so well for dynamic clusters (scaling up/down # > of nodes) because we don't know in advance what the node identities will be > or how many there will be. > In order to support dynamic sets of node identities, add support for > specifying a "Node Group," for which all identities in the group will be > granted access to /proxy. A UserGroupProvider can then be implemented to > gather node identities dynamically from the cluster environment. -- This message was sent by Atlassian JIRA (v7.6.3#76005)