Major Description
Currently Ranger supports creation of policies that can allow access when specific conditions are met (for example, resources, user, groups, access-type, custom-conditions..). In addition to this, having the ability to create policies that deny access for specific conditions will help address many usecases, like:
- deny access for specific users/groups/ip-addresses/time-of-day
- deny access when specific conditions are met - like resources/users/groups/access-types/custom-conditions
Attachments
Issue Links
- links to
There are no Sub-Tasks for this issue.