[RANGER-3779] conditions enhancement to support macros IS_IN_ANY_GROUP, IS_IN_ANY_ROLE, HAS_TAGS

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0, 2.3.0
• Component/s: plugins
• Assignee: Madhan Neethiraj
• Reporter: Madhan Neethiraj
• Created: 26/May/22 23:52
• Updated: 15/Jun/22 16:00
• Resolved: 02/Jun/22 13:53

Description

It is sometimes necessary to setup permissions for users who don't belong to any group or any role. Following macros will make it easier to handle such use cases:

• IS_NOT_IN_ANY_GROUP
• IS_NOT_IN_ANY_ROLE
• IS_IN_ANY_GROUP
• IS_IN_ANY_ROLE

In addition, having support for following macros will make it easier to check if current resource has any tags or not:

• HAS_ANY_TAG
• HAS_NO_TAG

 

Issue Links

• relates to: RANGER-3764 conditions to support macros IS_IN_GROUP, IS_IN_ROLE, HAS_TAG