{
  "serviceName": "cl1_knox",
  "serviceId": 1,
  "policyVersion": 5,
  "policyUpdateTime": "20170620-17:47:01.000-+0100",
  "policies": [
    {
      "service": "cl1_knox",
      "name": "all - topology, service",
      "policyType": 0,
      "description": "Policy for all - topology, service",
      "isAuditEnabled": true,
      "resources": {
        "topology": {
          "values": [
            "*"
          ],
          "isExcludes": false,
          "isRecursive": false
        },
        "service": {
          "values": [
            "*"
          ],
          "isExcludes": false,
          "isRecursive": false
        }
      },
      "policyItems": [
        {
          "accesses": [
            {
              "type": "allow",
              "isAllowed": true
            }
          ],
          "users": [
            "admin"
          ],
          "groups": [],
          "conditions": [],
          "delegateAdmin": true
        }
      ],
      "denyPolicyItems": [],
      "allowExceptions": [],
      "denyExceptions": [],
      "dataMaskPolicyItems": [],
      "rowFilterPolicyItems": [],
      "id": 1,
      "isEnabled": true,
      "version": 1
    },
    {
      "service": "cl1_knox",
      "name": "ClusterPolicy",
      "policyType": 0,
      "description": "",
      "isAuditEnabled": true,
      "resources": {
        "topology": {
          "values": [
            "cluster"
          ],
          "isExcludes": false,
          "isRecursive": false
        },
        "service": {
          "values": [
            "KAFKA",
            "WEBHDFS",
            "WEBHBASE",
            "SOLR"
          ],
          "isExcludes": false,
          "isRecursive": false
        }
      },
      "policyItems": [
        {
          "accesses": [
            {
              "type": "allow",
              "isAllowed": true
            }
          ],
          "users": [
            "alice"
          ],
          "groups": [],
          "conditions": [],
          "delegateAdmin": false
        }
      ],
      "denyPolicyItems": [],
      "allowExceptions": [],
      "denyExceptions": [],
      "dataMaskPolicyItems": [],
      "rowFilterPolicyItems": [],
      "id": 2,
      "isEnabled": true,
      "version": 2
    },
    {
      "service": "cl1_knox",
      "name": "StormPolicy",
      "policyType": 0,
      "description": "",
      "isAuditEnabled": true,
      "resources": {
        "topology": {
          "values": [
            "cluster"
          ],
          "isExcludes": false,
          "isRecursive": false
        },
        "service": {
          "values": [
            "STORM"
          ],
          "isExcludes": false,
          "isRecursive": false
        }
      },
      "policyItems": [
        {
          "accesses": [
            {
              "type": "allow",
              "isAllowed": true
            }
          ],
          "users": [
            "bob"
          ],
          "groups": [],
          "conditions": [],
          "delegateAdmin": false
        }
      ],
      "denyPolicyItems": [],
      "allowExceptions": [],
      "denyExceptions": [],
      "dataMaskPolicyItems": [],
      "rowFilterPolicyItems": [],
      "id": 3,
      "isEnabled": true,
      "version": 1
    }
  ],
  "serviceDef": {
    "name": "knox",
    "implClass": "org.apache.ranger.services.knox.RangerServiceKnox",
    "label": "Knox Gateway",
    "description": "Knox Gateway",
    "options": {
      "enableDenyAndExceptionsInPolicies": "true"
    },
    "configs": [
      {
        "itemId": 1,
        "name": "username",
        "type": "string",
        "mandatory": true,
        "validationRegEx": "",
        "validationMessage": "",
        "uiHint": "",
        "label": "Username"
      },
      {
        "itemId": 2,
        "name": "password",
        "type": "password",
        "mandatory": true,
        "validationRegEx": "",
        "validationMessage": "",
        "uiHint": "",
        "label": "Password"
      },
      {
        "itemId": 3,
        "name": "knox.url",
        "type": "string",
        "mandatory": true,
        "defaultValue": "",
        "validationRegEx": "",
        "validationMessage": "",
        "uiHint": ""
      },
      {
        "itemId": 4,
        "name": "commonNameForCertificate",
        "type": "string",
        "mandatory": false,
        "validationRegEx": "",
        "validationMessage": "",
        "uiHint": "",
        "label": "Common Name for Certificate"
      }
    ],
    "resources": [
      {
        "itemId": 1,
        "name": "topology",
        "type": "string",
        "level": 10,
        "mandatory": true,
        "lookupSupported": true,
        "recursiveSupported": false,
        "excludesSupported": true,
        "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
        "matcherOptions": {
          "wildCard": "true",
          "ignoreCase": "false"
        },
        "validationRegEx": "",
        "validationMessage": "",
        "uiHint": "",
        "label": "Knox Topology",
        "description": "Knox Topology"
      },
      {
        "itemId": 2,
        "name": "service",
        "type": "string",
        "level": 20,
        "parent": "topology",
        "mandatory": true,
        "lookupSupported": true,
        "recursiveSupported": false,
        "excludesSupported": true,
        "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
        "matcherOptions": {
          "wildCard": "true",
          "ignoreCase": "false"
        },
        "validationRegEx": "",
        "validationMessage": "",
        "uiHint": "",
        "label": "Knox Service",
        "description": "Knox Service"
      }
    ],
    "accessTypes": [
      {
        "itemId": 1,
        "name": "allow",
        "label": "Allow",
        "impliedGrants": []
      }
    ],
    "policyConditions": [
      {
        "itemId": 1,
        "name": "ip-range",
        "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerIpMatcher",
        "evaluatorOptions": {},
        "validationRegEx": "",
        "validationMessage": "",
        "uiHint": "",
        "label": "IP Address Range",
        "description": "IP Address Range"
      }
    ],
    "contextEnrichers": [],
    "enums": [],
    "dataMaskDef": {
      "maskTypes": [],
      "accessTypes": [],
      "resources": []
    },
    "rowFilterDef": {
      "accessTypes": [],
      "resources": []
    },
    "id": 5,
    "guid": "84b481b5-f23b-4f71-b8b6-ab33977149ca",
    "isEnabled": true,
    "createTime": "20170620-17:41:25.000-+0100",
    "updateTime": "20170620-17:41:25.000-+0100",
    "version": 1
  },
  "auditMode": "audit-default"
}