Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-546

Custom condition evaluation issues

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.5.0
    • Fix Version/s: 0.5.0
    • Component/s: plugins
    • Labels:
      None

      Description

      Current implementation of custom condition evaluation supports only one condition of a specific name across all policy-items. This limits creation of policies that grant different accesses based on different condition-values for the same condition name. This needs to be fixed so that policies as details below can be created:

      resource: database=default; table=testTable
      policyItem-1: user=user1; condition={time-range=9am-5pm}; access=read
      policyItem-2: user=user2; condition={time-range=11pm-7am}; access=read,write
      

        Attachments

          Activity

            People

            • Assignee:
              madhan.neethiraj Madhan Neethiraj
              Reporter:
              madhan.neethiraj Madhan Neethiraj
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: