[RANGER-2507] Support for policy to implicitly deny all accesses not explicitly allowed by it

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.2.0
• Fix Version/s: 2.0.0
• Component/s: Ranger
• Assignee: Abhay Kulkarni
• Reporter: Abhay Kulkarni
• Created: 17/Jul/19 00:30
• Updated: 18/Oct/19 12:50
• Resolved: 17/Jul/19 05:48

Description

Ranger policy model needs to be enhanced to support a feature that implicitly denies access to the resource if the policy does not allow access for requested operation.

Issue Links

• causes: RANGER-2569 Policy with isDenyAllElse=true denies request to check if any access is allowed