[RANGER-1200] Ranger policies should support notion of OWNER user

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.6.1
• Fix Version/s: 0.7.0
• Assignee: Abhay Kulkarni
• Reporter: Madhan Neethiraj
• Created: 01/Nov/16 08:14
• Updated: 03/Nov/16 18:58
• Resolved: 03/Nov/16 18:58

Description

Components like HDFS have the notion of an owner for the resource being accessed. For such components, it should be possible to setup Ranger policies to grant specific permissions for owners of accessed resources.

Example usecase: users should have read/write/execute/delegate-admin privileges on files and directories they own under /home/. Ranger policy should be like:

{ path=/home/*; users=[ {OWNER} ]; permission=[ read, write, execute ]; isDelegateAdmin=true}