Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
Description
Current authorization model in Atlas supports policies at the level of operations - like which users/groups can create/update/delete of types/classifications/entities.
This model needs to be enhanced/replaced to support more finer level of control - for example:
- control operations on entity instances based on entity-type/entity-classification/entity-id
- users/groups allowed to create/update/delete entities, add/update/remove classifications on entities, what classifications users are allowed to add/update/remove, etc
- control operations on types based on type-name/type-category
- users/groups allowed to create/update/delete classifications, relationships, etc
- control access to admin operations - like import/export
Attachments
Attachments
Issue Links
- requires
-
ATLAS-2515 add classification to the entity fails if there is no read classification permission
-
- Resolved
-
-
ATLAS-2463 Documentation for Atlas authorization at instance level
-
- Resolved
-
-
ATLAS-2486 Policy json file for authorization in distro conf
-
- Resolved
-
-
ATLAS-2503 Fix authorization while creating/updating EnumDef
-
- Resolved
-
-
ATLAS-2505 Set client IP to authorization request call for audit logging.
-
- Resolved
-
-
ATLAS-2544 Initialize Atlas Authorizer after typedef initialization
-
- Resolved
-