Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-278

REST, Store: validation of policy/service/service-def

Details

    • New Feature
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 0.5.0
    • 0.5.0
    • None
    • None

    Description

      Policy/Service/ServiceDef validation should be added during create/update/delete operation. Here are some of the validations to add:

      • values are provided for all mandatory fields (names, resources, etc)
      • values are valid (for example: based on validationRegEx in the resource def, enum values, no duplicate names for service-def/service/policy-within-a-service)
      • ensure that user has permissions to create/update/view policy/service/service-def
      • check for conflicting/overlapping policies

      Attachments

        Issue Links

          There are no Sub-Tasks for this issue.

          Activity

            alok Alok Lal added a comment - Review created: https://reviews.apache.org/r/31587/
            alok Alok Lal added a comment -

            Consolidated patch.

            alok Alok Lal added a comment - Consolidated patch.
            alok Alok Lal added a comment -

            New Review https://reviews.apache.org/r/31763/ created for policy validation changes.

            alok Alok Lal added a comment - New Review https://reviews.apache.org/r/31763/ created for policy validation changes.
            alok Alok Lal added a comment -

            Move move validation classes under org.apache.ranger.plugin.model.validation

            alok Alok Lal added a comment - Move move validation classes under org.apache.ranger.plugin.model.validation
            alok Alok Lal added a comment -

            Re-enabled policy validation since the policy query changes have gone in. Review created

            alok Alok Lal added a comment - Re-enabled policy validation since the policy query changes have gone in. Review created

            Policy validation fails while creating a Hive policy, due to missing resource 'udf'. Hive service-def has 2 resources, table and udf, at the same level. The validation should require only one of these resources to be provided.

            madhan Madhan Neethiraj added a comment - Policy validation fails while creating a Hive policy, due to missing resource 'udf'. Hive service-def has 2 resources, table and udf, at the same level. The validation should require only one of these resources to be provided.
            alok Alok Lal added a comment -

            Open issue of Hive UDF policy creation is being tracked separately via RANGER-437.

            alok Alok Lal added a comment - Open issue of Hive UDF policy creation is being tracked separately via RANGER-437 .

            People

              alok Alok Lal
              alok Alok Lal
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: