[RANGER-3609] option to add usergroup enricher automatically based on references in policies

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0, 2.3.0
• Fix Version/s: 3.0.0, 2.3.0
• Component/s: plugins
• Assignee: Madhan Neethiraj
• Reporter: Madhan Neethiraj
• Created: 07/Feb/22 00:04
• Updated: 21/May/23 20:12
• Resolved: 11/Feb/22 19:53

Description

Enhancements in RANGER-3550, RANGER-3567, RANGER-3586, RANGER-3605 enable referencing user/group/tag attributes in conditions, row-filter expressions and resource names. Plugin require RangerUserStoreEnricher to be enabled to obtain user/group attributes from Ranger.

In stead of requiring service-defs to be updated to add RangerUserStoreEnricher, it will help if plugin can automatically include this enricher when user/group attributes are referenced in any policy.

Issue Links

• is related to: RANGER-3550 support for using user/tag attributes in row-filter expressions and conditions
• is related to: RANGER-3567 support for use of user attributes in policy resources
• is related to: RANGER-3586 Script condition expression to support csv of group/tag attributes
• is related to: RANGER-3605 Support macros in row-filter/condition expressions
• relates to: RANGER-4023 UserStoreEnricher is not enabled if only mask conditon has attribute based expression
• links to: Patch in review board