Description
When a service is created, Ranger Admin creates a default policy in the new service which grants all access to the user specified in service-config. This works for most services. However, it is possible that some service implementation might want to create default policy with different accesses. It will be useful to provide a mechanism to enable service-specific default policy creation – similar to service-specific resource-lookup implementations which is available today via RangerBaseService interface. Something like:
public abstract class RangerBaseService {
// ...
public List<RangerPolicy> getDefaultPolicies();
}
Attachments
Issue Links
- relates to
-
RANGER-1482 'Ranger KMS' repo is not getting created in manual installation
- Resolved