Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-546

Custom condition evaluation issues

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 0.5.0
    • 0.5.0
    • plugins
    • None

    Description

      Current implementation of custom condition evaluation supports only one condition of a specific name across all policy-items. This limits creation of policies that grant different accesses based on different condition-values for the same condition name. This needs to be fixed so that policies as details below can be created:

      resource: database=default; table=testTable
      policyItem-1: user=user1; condition={time-range=9am-5pm}; access=read
      policyItem-2: user=user2; condition={time-range=11pm-7am}; access=read,write
      

      Attachments

        Activity

          People

            madhan Madhan Neethiraj
            madhan Madhan Neethiraj
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: