[RANGER-3508] Enable easier access to user/group/tag/resource attributes in condition expressions

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0, 2.3.0
• Component/s: plugins
• Assignee: Madhan Neethiraj
• Reporter: Madhan Neethiraj
• Created: 09/Nov/21 03:39
• Updated: 17/Feb/23 00:08
• Resolved: 16/Nov/21 05:43

Description

User/group/tags/resource attributes should be easily accessible in condition expressions, with expressions like:

USER.state == 'CA'
UG['test'].dept == 'MKTG'
REQ.accessType == 'SELECT'
RES.database == 'hr'
RES.table == 'employee'
TAG._type == 'PII'
TAG.attr1 == 'value1'
TAGS.PII.attr1 == 'value1'
TNAMES.length == 2
TNAMES.indexOf('PCI') != -1