[NIFI-1550] Authorizer API

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.0.0
• Component/s: Core Framework
• Assignee: Matt Gilman
• Reporter: Matt Gilman
• Created: 22/Feb/16 20:40
• Updated: 12/Aug/16 21:45
• Resolved: 12/Aug/16 21:45

Description

This is a parent ticket for tracking all work done for the Authorizer feature proposal phase 1 [1].

At a high level, all authorization decisions are delegated to a provider and given the identity of the entity, the resource being accessed, the action, and the context of the request.

Additionally, the Authorizer will be able to support an audit query that presents back the recently active users including their last request, last rejected attempts, and last mutable requests. A given implementation of an Authorizer may or may not offer to support user request audits.

Sub tickets will be created for tracking specific units of work. Once all sub tickets are completed, this ticket will be finished.

[1] https://cwiki.apache.org/confluence/display/NIFI/Support+Authorizer+API

Issue Links

• is related to: NIFI-2420 Add a section for Multi-tenant Authorization to the Admin Guide