[RANGER-3168] User/Auditor should have read-only access for Servicedef via PublicAPIsv2 API

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0
• Fix Version/s: 3.0.0, 2.2.0
• Component/s: Ranger
• Assignee: Mahesh Hanumant Bandal
• Reporter: Mahesh Hanumant Bandal
• Created: 29/Jan/21 11:06
• Updated: 06/Feb/21 03:11
• Resolved: 06/Feb/21 03:11

Description

Following GET API's should be accessible for other users.

GET API: /service/public/v2/api/servicedef/
GET API: /service/public/v2/api/servicedef/{id}
GET API: /service/public/v2/api/servicedef/name/{name}

If a user has permissions on the "Resource Based Policies" module, then he is be able to view servicedef using Ranger-UI and therefore he can access servicedef using GET API- /service/public/v2/api/servicedef/

KeyAdmin and KMSAuditor users can only access KMS servicedef.

 

Issue Links

• links to: Apache Review Request