[RANGER-1855] Importing and translating policies from Apache Sentry

• Type: New Feature
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Component/s: Ranger
• Assignee: Unassigned
• Reporter: Srikanth Venkat
• Created: 23/Oct/17 17:23
• Updated: 25/Oct/17 10:15

Description

As an enterprise security admin, I would like to be able to translate or bulk import RBAC based access control polices from Apache Sentry so that I can enhance my access control and authorization entitlements as ABAC based policies within Ranger with dynamic policy conditions.

Implementation considerations:

1. Given an Apache Sentry policy repository be able to translate authz policies from either Sentry policy store DB or using the policy export tool https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=61309948 .
2. If Sentry has REST APIs to support exporting from its policy store, perhaps some of our community members can comment on whether there is a better way to provide the policy translation and import into Ranger policy store.