| { |
| "serviceName": "cl1_kafka", |
| "serviceId": 7, |
| "policyVersion": 5, |
| "policyUpdateTime": "20170220-14:17:37.000-+0000", |
| "policies": [ |
| { |
| "service": "cl1_kafka", |
| "name": "all - cluster", |
| "policyType": 0, |
| "description": "Policy for all - cluster", |
| "isAuditEnabled": true, |
| "resources": { |
| "cluster": { |
| "values": [ |
| "*" |
| ], |
| "isExcludes": false, |
| "isRecursive": false |
| } |
| }, |
| "policyItems": [ |
| { |
| "accesses": [ |
| { |
| "type": "publish", |
| "isAllowed": true |
| }, |
| { |
| "type": "consume", |
| "isAllowed": true |
| }, |
| { |
| "type": "configure", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe", |
| "isAllowed": true |
| }, |
| { |
| "type": "create", |
| "isAllowed": true |
| }, |
| { |
| "type": "delete", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka_admin", |
| "isAllowed": true |
| }, |
| { |
| "type": "idempotent_write", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe_configs", |
| "isAllowed": true |
| }, |
| { |
| "type": "alter_configs", |
| "isAllowed": true |
| }, |
| { |
| "type": "cluster_action", |
| "isAllowed": true |
| } |
| ], |
| "users": [ |
| "admin","kafka" |
| ], |
| "groups": [ |
| "IT" |
| ], |
| "conditions": [], |
| "delegateAdmin": true |
| } |
| ], |
| "denyPolicyItems": [], |
| "allowExceptions": [], |
| "denyExceptions": [], |
| "dataMaskPolicyItems": [], |
| "rowFilterPolicyItems": [], |
| "id": 40, |
| "isEnabled": true, |
| "version": 2 |
| }, |
| { |
| "service": "cl1_kafka", |
| "name": "all - topic", |
| "policyType": 0, |
| "description": "Policy for all - topic", |
| "isAuditEnabled": true, |
| "resources": { |
| "topic": { |
| "values": [ |
| "*" |
| ], |
| "isExcludes": false, |
| "isRecursive": false |
| } |
| }, |
| "policyItems": [ |
| { |
| "accesses": [ |
| { |
| "type": "publish", |
| "isAllowed": true |
| }, |
| { |
| "type": "consume", |
| "isAllowed": true |
| }, |
| { |
| "type": "configure", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe", |
| "isAllowed": true |
| }, |
| { |
| "type": "create", |
| "isAllowed": true |
| }, |
| { |
| "type": "delete", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka_admin", |
| "isAllowed": true |
| }, |
| { |
| "type": "idempotent_write", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe_configs", |
| "isAllowed": true |
| }, |
| { |
| "type": "alter_configs", |
| "isAllowed": true |
| }, |
| { |
| "type": "cluster_action", |
| "isAllowed": true |
| } |
| ], |
| "users": [ |
| "admin","kafka", "client" |
| ], |
| "groups": [ |
| "IT" |
| ], |
| "conditions": [], |
| "delegateAdmin": true |
| } |
| ], |
| "denyPolicyItems": [], |
| "allowExceptions": [], |
| "denyExceptions": [], |
| "dataMaskPolicyItems": [], |
| "rowFilterPolicyItems": [], |
| "id": 18, |
| "isEnabled": true, |
| "version": 2 |
| }, |
| { |
| "service": "cl1_kafka", |
| "name": "TestPolicy", |
| "policyType": 0, |
| "description": "", |
| "isAuditEnabled": true, |
| "resources": { |
| "topic": { |
| "values": [ |
| "test" |
| ], |
| "isExcludes": false, |
| "isRecursive": false |
| } |
| }, |
| "policyItems": [ |
| { |
| "accesses": [ |
| { |
| "type": "publish", |
| "isAllowed": true |
| }, |
| { |
| "type": "consume", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe", |
| "isAllowed": true |
| }, |
| { |
| "type": "idempotent_write", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe_configs", |
| "isAllowed": true |
| }, |
| { |
| "type": "alter_configs", |
| "isAllowed": true |
| }, |
| { |
| "type": "cluster_action", |
| "isAllowed": true |
| } |
| ], |
| "users": [], |
| "groups": [ |
| "public" |
| ], |
| "conditions": [], |
| "delegateAdmin": false |
| } |
| ], |
| "denyPolicyItems": [], |
| "allowExceptions": [], |
| "denyExceptions": [], |
| "dataMaskPolicyItems": [], |
| "rowFilterPolicyItems": [], |
| "id": 19, |
| "isEnabled": true, |
| "version": 1 |
| }, |
| { |
| "service": "cl1_kafka", |
| "name": "ClusterLevelPolicy", |
| "policyType": 0, |
| "description": "", |
| "isAuditEnabled": true, |
| "resources": { |
| "topic": { |
| "values": [ |
| "test" |
| ], |
| "isExcludes": false, |
| "isRecursive": false |
| } |
| }, |
| "policyItems": [ |
| { |
| "accesses": [ |
| { |
| "type": "publish", |
| "isAllowed": true |
| }, |
| { |
| "type": "consume", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe", |
| "isAllowed": true |
| }, |
| { |
| "type": "idempotent_write", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe_configs", |
| "isAllowed": true |
| }, |
| { |
| "type": "alter_configs", |
| "isAllowed": true |
| }, |
| { |
| "type": "cluster_action", |
| "isAllowed": true |
| } |
| ], |
| "users": ["kafka"], |
| "groups": [], |
| "conditions": [], |
| "delegateAdmin": false |
| } |
| ], |
| "denyPolicyItems": [], |
| "allowExceptions": [], |
| "denyExceptions": [], |
| "dataMaskPolicyItems": [], |
| "rowFilterPolicyItems": [], |
| "id": 25, |
| "isEnabled": true, |
| "version": 1 |
| }, |
| { |
| "service": "cl1_kafka", |
| "name": "DevPolicy", |
| "policyType": 0, |
| "description": "", |
| "isAuditEnabled": true, |
| "resources": { |
| "topic": { |
| "values": [ |
| "dev" |
| ], |
| "isExcludes": false, |
| "isRecursive": false |
| } |
| }, |
| "policyItems": [ |
| { |
| "accesses": [ |
| { |
| "type": "consume", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe", |
| "isAllowed": true |
| } |
| ], |
| "users": [], |
| "groups": [ |
| "public" |
| ], |
| "conditions": [], |
| "delegateAdmin": false |
| } |
| ], |
| "denyPolicyItems": [], |
| "allowExceptions": [], |
| "denyExceptions": [], |
| "dataMaskPolicyItems": [], |
| "rowFilterPolicyItems": [], |
| "id": 30, |
| "isEnabled": true, |
| "version": 1 |
| }, |
| { |
| "service": "cl1_kafka", |
| "name": "DelegationToken Policy", |
| "policyType": 0, |
| "description": "DelegationTokenPolicy", |
| "isAuditEnabled": true, |
| "resources": { |
| "delegationtoken": { |
| "values": [ |
| "*" |
| ], |
| "isExcludes": false, |
| "isRecursive": false |
| } |
| }, |
| "policyItems": [ |
| { |
| "accesses": [ |
| { |
| "type": "publish", |
| "isAllowed": true |
| }, |
| { |
| "type": "consume", |
| "isAllowed": true |
| }, |
| { |
| "type": "configure", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe", |
| "isAllowed": true |
| }, |
| { |
| "type": "create", |
| "isAllowed": true |
| }, |
| { |
| "type": "delete", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka_admin", |
| "isAllowed": true |
| }, |
| { |
| "type": "idempotent_write", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe_configs", |
| "isAllowed": true |
| }, |
| { |
| "type": "alter_configs", |
| "isAllowed": true |
| } |
| ], |
| "users": [ |
| "admin","kafka", "client" |
| ], |
| "groups": [ |
| "IT" |
| ], |
| "conditions": [], |
| "delegateAdmin": true |
| } |
| ], |
| "denyPolicyItems": [], |
| "allowExceptions": [], |
| "denyExceptions": [], |
| "dataMaskPolicyItems": [], |
| "rowFilterPolicyItems": [], |
| "id": 31, |
| "isEnabled": true, |
| "version": 2 |
| }, |
| { |
| "service": "cl1_kafka", |
| "name": "ConsumerGroup Policy", |
| "policyType": 0, |
| "description": "ConsumerGroup Policy", |
| "isAuditEnabled": true, |
| "resources": { |
| "consumergroup": { |
| "values": [ |
| "*" |
| ], |
| "isExcludes": false, |
| "isRecursive": false |
| } |
| }, |
| "policyItems": [ |
| { |
| "accesses": [ |
| { |
| "type": "consume", |
| "isAllowed": true |
| }, |
| { |
| "type": "describe", |
| "isAllowed": true |
| }, |
| { |
| "type": "delete", |
| "isAllowed": true |
| } |
| ], |
| "users": [ |
| "admin","kafka", "client" |
| ], |
| "groups": [ |
| "IT" |
| ], |
| "conditions": [], |
| "delegateAdmin": true |
| } |
| ], |
| "denyPolicyItems": [], |
| "allowExceptions": [], |
| "denyExceptions": [], |
| "dataMaskPolicyItems": [], |
| "rowFilterPolicyItems": [], |
| "id": 32, |
| "isEnabled": true, |
| "version": 2 |
| } |
| ], |
| "serviceDef": { |
| "name": "kafka", |
| "implClass": "org.apache.ranger.services.kafka.RangerServiceKafka", |
| "label": "Kafka", |
| "description": "Apache Kafka", |
| "options": {}, |
| "configs": [ |
| { |
| "itemId": 1, |
| "name": "username", |
| "type": "string", |
| "mandatory": true, |
| "label": "Username" |
| }, |
| { |
| "itemId": 2, |
| "name": "password", |
| "type": "password", |
| "mandatory": true, |
| "label": "Password" |
| }, |
| { |
| "itemId": 3, |
| "name": "zookeeper.connect", |
| "type": "string", |
| "mandatory": true, |
| "defaultValue": "localhost:2181", |
| "label": "Zookeeper Connect String" |
| }, |
| { |
| "itemId": 4, |
| "name": "commonNameForCertificate", |
| "type": "string", |
| "mandatory": false, |
| "label": "Ranger Plugin SSL CName" |
| } |
| ], |
| "resources": [ |
| { |
| "itemId": 1, |
| "name": "topic", |
| "type": "string", |
| "level": 1, |
| "mandatory": true, |
| "lookupSupported": true, |
| "recursiveSupported": false, |
| "excludesSupported": true, |
| "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher", |
| "matcherOptions": { |
| "wildCard": "true", |
| "ignoreCase": "true" |
| }, |
| "validationRegEx": "", |
| "validationMessage": "", |
| "uiHint": "", |
| "label": "Topic", |
| "description": "Topic" |
| }, |
| { |
| "itemId":2, |
| "name":"transactionalid", |
| "type":"string", |
| "level":1, |
| "mandatory":true, |
| "lookupSupported":false, |
| "recursiveSupported":false, |
| "excludesSupported":true, |
| "matcher":"org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher", |
| "matcherOptions":{ |
| "wildCard":true, |
| "ignoreCase":true |
| }, |
| "validationRegEx":"", |
| "validationMessage":"", |
| "uiHint":"", |
| "label":"Transactional Id", |
| "description":"Transactional Id" |
| }, |
| { |
| "itemId":3, |
| "name":"cluster", |
| "type":"string", |
| "level":1, |
| "mandatory":true, |
| "lookupSupported":false, |
| "recursiveSupported":false, |
| "excludesSupported":true, |
| "matcher":"org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher", |
| "matcherOptions":{ |
| "wildCard":true, |
| "ignoreCase":true |
| }, |
| "validationRegEx":"", |
| "validationMessage":"", |
| "uiHint":"", |
| "label":"Cluster", |
| "description":"Cluster" |
| }, |
| { |
| "itemId":4, |
| "name":"delegationtoken", |
| "type":"string", |
| "level":1, |
| "mandatory":true, |
| "lookupSupported":false, |
| "recursiveSupported":false, |
| "excludesSupported":true, |
| "matcher":"org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher", |
| "matcherOptions":{ |
| "wildCard":true, |
| "ignoreCase":true |
| }, |
| "validationRegEx":"", |
| "validationMessage":"", |
| "uiHint":"", |
| "label":"Delegation Token", |
| "description":"Delegation Token" |
| }, |
| { |
| "itemId":5, |
| "name":"consumergroup", |
| "type":"string", |
| "level":1, |
| "mandatory":true, |
| "lookupSupported":false, |
| "recursiveSupported":false, |
| "excludesSupported":true, |
| "matcher":"org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher", |
| "matcherOptions":{ |
| "wildCard":true, |
| "ignoreCase":true |
| }, |
| "validationRegEx":"", |
| "validationMessage":"", |
| "uiHint":"", |
| "label":"Consumer Group", |
| "description":"Consumer Group" |
| } |
| ], |
| "accessTypes": [ |
| { |
| "itemId": 1, |
| "name": "publish", |
| "label": "Publish", |
| "impliedGrants": [ |
| "describe" |
| ] |
| }, |
| { |
| "itemId": 2, |
| "name": "consume", |
| "label": "Consume", |
| "impliedGrants": [ |
| "describe" |
| ] |
| }, |
| { |
| "itemId": 5, |
| "name": "configure", |
| "label": "Configure", |
| "impliedGrants": [ |
| "describe" |
| ] |
| }, |
| { |
| "itemId": 6, |
| "name": "describe", |
| "label": "Describe", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 8, |
| "name": "create", |
| "label": "Create", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 9, |
| "name": "delete", |
| "label": "Delete", |
| "impliedGrants": ["describe"] |
| }, |
| { |
| "itemId": 7, |
| "name": "kafka_admin", |
| "label": "Kafka Admin", |
| "impliedGrants": [ |
| "publish", |
| "consume", |
| "configure", |
| "describe", |
| "create", |
| "delete", |
| "describe_configs", |
| "alter_configs", |
| "idempotent_write", |
| "cluster_action" |
| ] |
| }, |
| { |
| "itemId":10, |
| "name":"idempotent_write", |
| "label":"Idempotent Write" |
| }, |
| { |
| "itemId":11, |
| "name":"describe_configs", |
| "label":"Describe Configs" |
| }, |
| { |
| "itemId":12, |
| "name":"alter_configs", |
| "label":"Alter Configs", |
| "impliedGrants":[ |
| "describe_configs" |
| ] |
| }, |
| { |
| "itemId":13, |
| "name":"cluster_action", |
| "label":"Cluster Action" |
| } |
| ], |
| "policyConditions": [ |
| { |
| "itemId": 1, |
| "name": "ip-range", |
| "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerIpMatcher", |
| "evaluatorOptions": {}, |
| "validationRegEx": "", |
| "validationMessage": "", |
| "uiHint": "", |
| "label": "IP Address Range", |
| "description": "IP Address Range" |
| } |
| ], |
| "contextEnrichers": [], |
| "enums": [], |
| "dataMaskDef": { |
| "maskTypes": [], |
| "accessTypes": [], |
| "resources": [] |
| }, |
| "rowFilterDef": { |
| "accessTypes": [], |
| "resources": [] |
| }, |
| "id": 9, |
| "guid": "be2bf354-612e-495a-85d2-9899a2f60947", |
| "isEnabled": true, |
| "createTime": "20170217-11:41:32.000-+0000", |
| "updateTime": "20170217-11:41:32.000-+0000", |
| "version": 1 |
| }, |
| "auditMode": "audit-default", |
| "tagPolicies": { |
| "serviceName": "KafkaTagService", |
| "serviceId": 5, |
| "policyVersion": 8, |
| "policyUpdateTime": "20170220-14:17:29.000-+0000", |
| "policies": [ |
| { |
| "service": "KafkaTagService", |
| "name": "EXPIRES_ON", |
| "policyType": 0, |
| "description": "Policy for data with EXPIRES_ON tag", |
| "isAuditEnabled": true, |
| "resources": { |
| "tag": { |
| "values": [ |
| "EXPIRES_ON" |
| ], |
| "isExcludes": false, |
| "isRecursive": false |
| } |
| }, |
| "policyItems": [], |
| "denyPolicyItems": [ |
| { |
| "accesses": [ |
| { |
| "type": "hdfs:read", |
| "isAllowed": true |
| }, |
| { |
| "type": "hdfs:write", |
| "isAllowed": true |
| }, |
| { |
| "type": "hdfs:execute", |
| "isAllowed": true |
| }, |
| { |
| "type": "hbase:read", |
| "isAllowed": true |
| }, |
| { |
| "type": "hbase:write", |
| "isAllowed": true |
| }, |
| { |
| "type": "hbase:create", |
| "isAllowed": true |
| }, |
| { |
| "type": "hbase:admin", |
| "isAllowed": true |
| }, |
| { |
| "type": "hive:select", |
| "isAllowed": true |
| }, |
| { |
| "type": "hive:update", |
| "isAllowed": true |
| }, |
| { |
| "type": "hive:create", |
| "isAllowed": true |
| }, |
| { |
| "type": "hive:drop", |
| "isAllowed": true |
| }, |
| { |
| "type": "hive:alter", |
| "isAllowed": true |
| }, |
| { |
| "type": "hive:index", |
| "isAllowed": true |
| }, |
| { |
| "type": "hive:lock", |
| "isAllowed": true |
| }, |
| { |
| "type": "hive:all", |
| "isAllowed": true |
| }, |
| { |
| "type": "yarn:submit-app", |
| "isAllowed": true |
| }, |
| { |
| "type": "yarn:admin-queue", |
| "isAllowed": true |
| }, |
| { |
| "type": "knox:allow", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:submitTopology", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:fileUpload", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:fileDownload", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:killTopology", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:rebalance", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:activate", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:deactivate", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:getTopologyConf", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:getTopology", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:getUserTopology", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:getTopologyInfo", |
| "isAllowed": true |
| }, |
| { |
| "type": "storm:uploadNewCredentials", |
| "isAllowed": true |
| }, |
| { |
| "type": "kms:create", |
| "isAllowed": true |
| }, |
| { |
| "type": "kms:delete", |
| "isAllowed": true |
| }, |
| { |
| "type": "kms:rollover", |
| "isAllowed": true |
| }, |
| { |
| "type": "kms:setkeymaterial", |
| "isAllowed": true |
| }, |
| { |
| "type": "kms:get", |
| "isAllowed": true |
| }, |
| { |
| "type": "kms:getkeys", |
| "isAllowed": true |
| }, |
| { |
| "type": "kms:getmetadata", |
| "isAllowed": true |
| }, |
| { |
| "type": "kms:generateeek", |
| "isAllowed": true |
| }, |
| { |
| "type": "kms:decrypteek", |
| "isAllowed": true |
| }, |
| { |
| "type": "solr:query", |
| "isAllowed": true |
| }, |
| { |
| "type": "solr:update", |
| "isAllowed": true |
| }, |
| { |
| "type": "solr:others", |
| "isAllowed": true |
| }, |
| { |
| "type": "solr:solr_admin", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka:publish", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka:consume", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka:configure", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka:describe", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka:create", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka:delete", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka:kafka_admin", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka:cluster_action", |
| "isAllowed": true |
| }, |
| { |
| "type": "atlas:read", |
| "isAllowed": true |
| }, |
| { |
| "type": "atlas:create", |
| "isAllowed": true |
| }, |
| { |
| "type": "atlas:update", |
| "isAllowed": true |
| }, |
| { |
| "type": "atlas:delete", |
| "isAllowed": true |
| }, |
| { |
| "type": "atlas:all", |
| "isAllowed": true |
| } |
| ], |
| "users": [], |
| "groups": [ |
| "public" |
| ], |
| "conditions": [ |
| { |
| "type": "accessed-after-expiry", |
| "values": [ |
| "yes" |
| ] |
| } |
| ], |
| "delegateAdmin": false |
| } |
| ], |
| "allowExceptions": [], |
| "denyExceptions": [], |
| "dataMaskPolicyItems": [], |
| "rowFilterPolicyItems": [], |
| "id": 10, |
| "isEnabled": true, |
| "version": 1 |
| }, |
| { |
| "service": "KafkaTagService", |
| "name": "MessagesPolicy", |
| "policyType": 0, |
| "description": "", |
| "isAuditEnabled": true, |
| "resources": { |
| "tag": { |
| "values": [ |
| "MessagesTag" |
| ], |
| "isExcludes": false, |
| "isRecursive": false |
| } |
| }, |
| "policyItems": [ |
| { |
| "accesses": [ |
| { |
| "type": "kafka:consume", |
| "isAllowed": true |
| }, |
| { |
| "type": "kafka:describe", |
| "isAllowed": true |
| } |
| ], |
| "users": [], |
| "groups": [ |
| "public" |
| ], |
| "conditions": [], |
| "delegateAdmin": false |
| } |
| ], |
| "denyPolicyItems": [], |
| "allowExceptions": [], |
| "denyExceptions": [], |
| "dataMaskPolicyItems": [], |
| "rowFilterPolicyItems": [], |
| "id": 20, |
| "isEnabled": true, |
| "version": 1 |
| } |
| ], |
| "serviceDef": { |
| "name": "tag", |
| "implClass": "org.apache.ranger.services.tag.RangerServiceTag", |
| "label": "TAG", |
| "description": "TAG Service Definition", |
| "options": { |
| "ui.pages": "tag-based-policies" |
| }, |
| "configs": [], |
| "resources": [ |
| { |
| "itemId": 1, |
| "name": "tag", |
| "type": "string", |
| "level": 1, |
| "mandatory": true, |
| "lookupSupported": true, |
| "recursiveSupported": false, |
| "excludesSupported": false, |
| "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher", |
| "matcherOptions": { |
| "wildCard": "false", |
| "ignoreCase": "false" |
| }, |
| "validationRegEx": "", |
| "validationMessage": "", |
| "uiHint": "{ \"singleValue\":true }", |
| "label": "TAG", |
| "description": "TAG" |
| } |
| ], |
| "accessTypes": [ |
| { |
| "itemId": 1002, |
| "name": "hdfs:read", |
| "label": "Read", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 1003, |
| "name": "hdfs:write", |
| "label": "Write", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 1004, |
| "name": "hdfs:execute", |
| "label": "Execute", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 2003, |
| "name": "hbase:read", |
| "label": "Read", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 2004, |
| "name": "hbase:write", |
| "label": "Write", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 2005, |
| "name": "hbase:create", |
| "label": "Create", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 2006, |
| "name": "hbase:admin", |
| "label": "Admin", |
| "impliedGrants": [ |
| "hbase:read", |
| "hbase:write", |
| "hbase:create" |
| ] |
| }, |
| { |
| "itemId": 3004, |
| "name": "hive:select", |
| "label": "select", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 3005, |
| "name": "hive:update", |
| "label": "update", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 3006, |
| "name": "hive:create", |
| "label": "Create", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 3007, |
| "name": "hive:drop", |
| "label": "Drop", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 3008, |
| "name": "hive:alter", |
| "label": "Alter", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 3009, |
| "name": "hive:index", |
| "label": "Index", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 3010, |
| "name": "hive:lock", |
| "label": "Lock", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 3011, |
| "name": "hive:all", |
| "label": "All", |
| "impliedGrants": [ |
| "hive:select", |
| "hive:update", |
| "hive:create", |
| "hive:drop", |
| "hive:alter", |
| "hive:index", |
| "hive:lock" |
| ] |
| }, |
| { |
| "itemId": 4005, |
| "name": "yarn:submit-app", |
| "label": "submit-app", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 4006, |
| "name": "yarn:admin-queue", |
| "label": "admin-queue", |
| "impliedGrants": [ |
| "yarn:submit-app" |
| ] |
| }, |
| { |
| "itemId": 5006, |
| "name": "knox:allow", |
| "label": "Allow", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 6007, |
| "name": "storm:submitTopology", |
| "label": "Submit Topology", |
| "impliedGrants": [ |
| "storm:fileUpload", |
| "storm:fileDownload" |
| ] |
| }, |
| { |
| "itemId": 6008, |
| "name": "storm:fileUpload", |
| "label": "File Upload", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 6011, |
| "name": "storm:fileDownload", |
| "label": "File Download", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 6012, |
| "name": "storm:killTopology", |
| "label": "Kill Topology", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 6013, |
| "name": "storm:rebalance", |
| "label": "Rebalance", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 6014, |
| "name": "storm:activate", |
| "label": "Activate", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 6015, |
| "name": "storm:deactivate", |
| "label": "Deactivate", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 6016, |
| "name": "storm:getTopologyConf", |
| "label": "Get Topology Conf", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 6017, |
| "name": "storm:getTopology", |
| "label": "Get Topology", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 6018, |
| "name": "storm:getUserTopology", |
| "label": "Get User Topology", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 6019, |
| "name": "storm:getTopologyInfo", |
| "label": "Get Topology Info", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 6020, |
| "name": "storm:uploadNewCredentials", |
| "label": "Upload New Credential", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 7008, |
| "name": "kms:create", |
| "label": "Create", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 7009, |
| "name": "kms:delete", |
| "label": "Delete", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 7010, |
| "name": "kms:rollover", |
| "label": "Rollover", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 7011, |
| "name": "kms:setkeymaterial", |
| "label": "Set Key Material", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 7012, |
| "name": "kms:get", |
| "label": "Get", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 7013, |
| "name": "kms:getkeys", |
| "label": "Get Keys", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 7014, |
| "name": "kms:getmetadata", |
| "label": "Get Metadata", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 7015, |
| "name": "kms:generateeek", |
| "label": "Generate EEK", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 7016, |
| "name": "kms:decrypteek", |
| "label": "Decrypt EEK", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 8108, |
| "name": "solr:query", |
| "label": "Query", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 8208, |
| "name": "solr:update", |
| "label": "Update", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 8308, |
| "name": "solr:others", |
| "label": "Others", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 8908, |
| "name": "solr:solr_admin", |
| "label": "Solr Admin", |
| "impliedGrants": [ |
| "solr:query", |
| "solr:update", |
| "solr:others" |
| ] |
| }, |
| { |
| "itemId": 9010, |
| "name": "kafka:publish", |
| "label": "Publish", |
| "impliedGrants": [ |
| "kafka:describe" |
| ] |
| }, |
| { |
| "itemId": 9011, |
| "name": "kafka:consume", |
| "label": "Consume", |
| "impliedGrants": [ |
| "kafka:describe" |
| ] |
| }, |
| { |
| "itemId": 9014, |
| "name": "kafka:configure", |
| "label": "Configure", |
| "impliedGrants": [ |
| "kafka:describe" |
| ] |
| }, |
| { |
| "itemId": 9015, |
| "name": "kafka:describe", |
| "label": "Describe", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 9017, |
| "name": "kafka:create", |
| "label": "Create", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 9018, |
| "name": "kafka:delete", |
| "label": "Delete", |
| "impliedGrants": [ |
| "kafka:describe" |
| ] |
| }, |
| { |
| "itemId": 9016, |
| "name": "kafka:kafka_admin", |
| "label": "Kafka Admin", |
| "impliedGrants": [ |
| "kafka:publish", |
| "kafka:consume", |
| "kafka:configure", |
| "kafka:describe", |
| "kafka:create", |
| "kafka:delete", |
| "kafka:describe_configs", |
| "kafka:alter_configs", |
| "kafka:idempotent_write", |
| "kafka:cluster_action" |
| ] |
| }, |
| { |
| "itemId":9019, |
| "name":"idempotent_write", |
| "label":"Idempotent Write" |
| }, |
| { |
| "itemId":9020, |
| "name":"describe_configs", |
| "label":"Describe Configs" |
| }, |
| { |
| "itemId":9021, |
| "name":"alter_configs", |
| "label":"Alter Configs", |
| "impliedGrants":[ |
| "describe_configs" |
| ] |
| }, |
| { |
| "itemId":9022, |
| "name":"cluster_action", |
| "label":"Cluster Action", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 11012, |
| "name": "atlas:read", |
| "label": "read", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 11013, |
| "name": "atlas:create", |
| "label": "create", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 11014, |
| "name": "atlas:update", |
| "label": "update", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 11015, |
| "name": "atlas:delete", |
| "label": "delete", |
| "impliedGrants": [] |
| }, |
| { |
| "itemId": 11016, |
| "name": "atlas:all", |
| "label": "All", |
| "impliedGrants": [ |
| "atlas:read", |
| "atlas:create", |
| "atlas:update", |
| "atlas:delete" |
| ] |
| } |
| ], |
| "policyConditions": [ |
| { |
| "itemId": 1, |
| "name": "accessed-after-expiry", |
| "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator", |
| "evaluatorOptions": { |
| "scriptTemplate": "ctx.isAccessedAfter(\u0027expiry_date\u0027);" |
| }, |
| "uiHint": "{ \"singleValue\":true }", |
| "label": "Accessed after expiry_date (yes/no)?", |
| "description": "Accessed after expiry_date? (yes/no)" |
| } |
| ], |
| "contextEnrichers": [ |
| { |
| "itemId": 1, |
| "name": "TagEnricher", |
| "enricher": "org.apache.ranger.plugin.contextenricher.RangerTagEnricher", |
| "enricherOptions": { |
| "tagRetrieverClassName": "org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever", |
| "tagRefresherPollingInterval": "60000" |
| } |
| } |
| ], |
| "enums": [], |
| "dataMaskDef": { |
| "maskTypes": [], |
| "accessTypes": [], |
| "resources": [] |
| }, |
| "rowFilterDef": { |
| "accessTypes": [], |
| "resources": [] |
| }, |
| "id": 100, |
| "guid": "0d047248-baff-4cf9-8e9e-d5d377284b2e", |
| "isEnabled": true, |
| "createTime": "20170217-11:41:33.000-+0000", |
| "updateTime": "20170217-11:41:35.000-+0000", |
| "version": 11 |
| }, |
| "auditMode": "audit-default" |
| } |
| } |
