{
  "serviceName": "cl1_kafka",
  "serviceId": 7,
  "policyVersion": 5,
  "policyUpdateTime": "20170220-14:17:37.000-+0000",
  "policies": [
    {
      "service": "cl1_kafka",
      "name": "all - cluster",
      "policyType": 0,
      "description": "Policy for all - cluster",
      "isAuditEnabled": true,
      "resources": {
        "cluster": {
          "values": [
            "*"
          ],
          "isExcludes": false,
          "isRecursive": false
        }
      },
      "policyItems": [
        {
          "accesses": [
            {
              "type": "publish",
              "isAllowed": true
            },
            {
              "type": "consume",
              "isAllowed": true
            },
            {
              "type": "configure",
              "isAllowed": true
            },
            {
              "type": "describe",
              "isAllowed": true
            },
            {
              "type": "create",
              "isAllowed": true
            },
            {
              "type": "delete",
              "isAllowed": true
            },
            {
              "type": "kafka_admin",
              "isAllowed": true
            },
            {
              "type": "idempotent_write",
              "isAllowed": true
            },
            {
              "type": "describe_configs",
              "isAllowed": true
            },
            {
              "type": "alter_configs",
              "isAllowed": true
            },
            {
              "type": "cluster_action",
              "isAllowed": true
            }
          ],
          "users": [
            "admin","kafka"
          ],
          "groups": [
            "IT"
          ],
          "conditions": [],
          "delegateAdmin": true
        }
      ],
      "denyPolicyItems": [],
      "allowExceptions": [],
      "denyExceptions": [],
      "dataMaskPolicyItems": [],
      "rowFilterPolicyItems": [],
      "id": 40,
      "isEnabled": true,
      "version": 2
    },
    {
      "service": "cl1_kafka",
      "name": "all - topic",
      "policyType": 0,
      "description": "Policy for all - topic",
      "isAuditEnabled": true,
      "resources": {
        "topic": {
          "values": [
            "*"
          ],
          "isExcludes": false,
          "isRecursive": false
        }
      },
      "policyItems": [
        {
          "accesses": [
            {
              "type": "publish",
              "isAllowed": true
            },
            {
              "type": "consume",
              "isAllowed": true
            },
            {
              "type": "configure",
              "isAllowed": true
            },
            {
              "type": "describe",
              "isAllowed": true
            },
            {
              "type": "create",
              "isAllowed": true
            },
            {
              "type": "delete",
              "isAllowed": true
            },
            {
              "type": "kafka_admin",
              "isAllowed": true
            },
            {
              "type": "idempotent_write",
              "isAllowed": true
            },
            {
              "type": "describe_configs",
              "isAllowed": true
            },
            {
              "type": "alter_configs",
              "isAllowed": true
            },
            {
              "type": "cluster_action",
              "isAllowed": true
            }
          ],
          "users": [
            "admin","kafka", "client"
          ],
          "groups": [
            "IT"
          ],
          "conditions": [],
          "delegateAdmin": true
        }
      ],
      "denyPolicyItems": [],
      "allowExceptions": [],
      "denyExceptions": [],
      "dataMaskPolicyItems": [],
      "rowFilterPolicyItems": [],
      "id": 18,
      "isEnabled": true,
      "version": 2
    },
    {
      "service": "cl1_kafka",
      "name": "TestPolicy",
      "policyType": 0,
      "description": "",
      "isAuditEnabled": true,
      "resources": {
        "topic": {
          "values": [
            "test"
          ],
          "isExcludes": false,
          "isRecursive": false
        }
      },
      "policyItems": [
        {
          "accesses": [
            {
              "type": "publish",
              "isAllowed": true
            },
            {
              "type": "consume",
              "isAllowed": true
            },
            {
              "type": "describe",
              "isAllowed": true
            },
            {
              "type": "idempotent_write",
              "isAllowed": true
            },
            {
              "type": "describe_configs",
              "isAllowed": true
            },
            {
              "type": "alter_configs",
              "isAllowed": true
            },
            {
              "type": "cluster_action",
              "isAllowed": true
            }
          ],
          "users": [],
          "groups": [
            "public"
          ],
          "conditions": [],
          "delegateAdmin": false
        }
      ],
      "denyPolicyItems": [],
      "allowExceptions": [],
      "denyExceptions": [],
      "dataMaskPolicyItems": [],
      "rowFilterPolicyItems": [],
      "id": 19,
      "isEnabled": true,
      "version": 1
    },
    {
      "service": "cl1_kafka",
      "name": "ClusterLevelPolicy",
      "policyType": 0,
      "description": "",
      "isAuditEnabled": true,
      "resources": {
        "topic": {
          "values": [
            "test"
          ],
          "isExcludes": false,
          "isRecursive": false
        }
      },
      "policyItems": [
        {
          "accesses": [
            {
              "type": "publish",
              "isAllowed": true
            },
            {
              "type": "consume",
              "isAllowed": true
            },
            {
              "type": "describe",
              "isAllowed": true
            },
            {
              "type": "idempotent_write",
              "isAllowed": true
            },
            {
              "type": "describe_configs",
              "isAllowed": true
            },
            {
              "type": "alter_configs",
              "isAllowed": true
            },
            {
              "type": "cluster_action",
              "isAllowed": true
            }
          ],
          "users": ["kafka"],
          "groups": [],
          "conditions": [],
          "delegateAdmin": false
        }
      ],
      "denyPolicyItems": [],
      "allowExceptions": [],
      "denyExceptions": [],
      "dataMaskPolicyItems": [],
      "rowFilterPolicyItems": [],
      "id": 25,
      "isEnabled": true,
      "version": 1
    },
    {
      "service": "cl1_kafka",
      "name": "DevPolicy",
      "policyType": 0,
      "description": "",
      "isAuditEnabled": true,
      "resources": {
        "topic": {
          "values": [
            "dev"
          ],
          "isExcludes": false,
          "isRecursive": false
        }
      },
      "policyItems": [
        {
          "accesses": [
            {
              "type": "consume",
              "isAllowed": true
            },
            {
              "type": "describe",
              "isAllowed": true
            }
          ],
          "users": [],
          "groups": [
            "public"
          ],
          "conditions": [],
          "delegateAdmin": false
        }
      ],
      "denyPolicyItems": [],
      "allowExceptions": [],
      "denyExceptions": [],
      "dataMaskPolicyItems": [],
      "rowFilterPolicyItems": [],
      "id": 30,
      "isEnabled": true,
      "version": 1
    },
    {
      "service": "cl1_kafka",
      "name": "DelegationToken Policy",
      "policyType": 0,
      "description": "DelegationTokenPolicy",
      "isAuditEnabled": true,
      "resources": {
        "delegationtoken": {
          "values": [
            "*"
          ],
          "isExcludes": false,
          "isRecursive": false
        }
      },
      "policyItems": [
        {
          "accesses": [
            {
              "type": "publish",
              "isAllowed": true
            },
            {
              "type": "consume",
              "isAllowed": true
            },
            {
              "type": "configure",
              "isAllowed": true
            },
            {
              "type": "describe",
              "isAllowed": true
            },
            {
              "type": "create",
              "isAllowed": true
            },
            {
              "type": "delete",
              "isAllowed": true
            },
            {
              "type": "kafka_admin",
              "isAllowed": true
            },
            {
              "type": "idempotent_write",
              "isAllowed": true
            },
            {
              "type": "describe_configs",
              "isAllowed": true
            },
            {
              "type": "alter_configs",
              "isAllowed": true
            }
          ],
          "users": [
            "admin","kafka", "client"
          ],
          "groups": [
            "IT"
          ],
          "conditions": [],
          "delegateAdmin": true
        }
      ],
      "denyPolicyItems": [],
      "allowExceptions": [],
      "denyExceptions": [],
      "dataMaskPolicyItems": [],
      "rowFilterPolicyItems": [],
      "id": 31,
      "isEnabled": true,
      "version": 2
    },
    {
      "service": "cl1_kafka",
      "name": "ConsumerGroup Policy",
      "policyType": 0,
      "description": "ConsumerGroup Policy",
      "isAuditEnabled": true,
      "resources": {
        "consumergroup": {
          "values": [
            "*"
          ],
          "isExcludes": false,
          "isRecursive": false
        }
      },
      "policyItems": [
        {
          "accesses": [
            {
              "type": "consume",
              "isAllowed": true
            },
            {
              "type": "describe",
              "isAllowed": true
            },
            {
              "type": "delete",
              "isAllowed": true
            }
          ],
          "users": [
            "admin","kafka", "client"
          ],
          "groups": [
            "IT"
          ],
          "conditions": [],
          "delegateAdmin": true
        }
      ],
      "denyPolicyItems": [],
      "allowExceptions": [],
      "denyExceptions": [],
      "dataMaskPolicyItems": [],
      "rowFilterPolicyItems": [],
      "id": 32,
      "isEnabled": true,
      "version": 2
    }
  ],
  "serviceDef": {
    "name": "kafka",
    "implClass": "org.apache.ranger.services.kafka.RangerServiceKafka",
    "label": "Kafka",
    "description": "Apache Kafka",
    "options": {},
    "configs": [
      {
        "itemId": 1,
        "name": "username",
        "type": "string",
        "mandatory": true,
        "label": "Username"
      },
      {
        "itemId": 2,
        "name": "password",
        "type": "password",
        "mandatory": true,
        "label": "Password"
      },
      {
        "itemId": 3,
        "name": "zookeeper.connect",
        "type": "string",
        "mandatory": true,
        "defaultValue": "localhost:2181",
        "label": "Zookeeper Connect String"
      },
      {
        "itemId": 4,
        "name": "commonNameForCertificate",
        "type": "string",
        "mandatory": false,
        "label": "Ranger Plugin SSL CName"
      }
    ],
    "resources": [
      {
        "itemId": 1,
        "name": "topic",
        "type": "string",
        "level": 1,
        "mandatory": true,
        "lookupSupported": true,
        "recursiveSupported": false,
        "excludesSupported": true,
        "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
        "matcherOptions": {
          "wildCard": "true",
          "ignoreCase": "true"
        },
        "validationRegEx": "",
        "validationMessage": "",
        "uiHint": "",
        "label": "Topic",
        "description": "Topic"
      },
      {
        "itemId":2,
        "name":"transactionalid",
        "type":"string",
        "level":1,
        "mandatory":true,
        "lookupSupported":false,
        "recursiveSupported":false,
        "excludesSupported":true,
        "matcher":"org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
        "matcherOptions":{
          "wildCard":true,
          "ignoreCase":true
        },
        "validationRegEx":"",
        "validationMessage":"",
        "uiHint":"",
        "label":"Transactional Id",
        "description":"Transactional Id"
      },
      {
        "itemId":3,
        "name":"cluster",
        "type":"string",
        "level":1,
        "mandatory":true,
        "lookupSupported":false,
        "recursiveSupported":false,
        "excludesSupported":true,
        "matcher":"org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
        "matcherOptions":{
          "wildCard":true,
          "ignoreCase":true
        },
        "validationRegEx":"",
        "validationMessage":"",
        "uiHint":"",
        "label":"Cluster",
        "description":"Cluster"
      },
      {
        "itemId":4,
        "name":"delegationtoken",
        "type":"string",
        "level":1,
        "mandatory":true,
        "lookupSupported":false,
        "recursiveSupported":false,
        "excludesSupported":true,
        "matcher":"org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
        "matcherOptions":{
          "wildCard":true,
          "ignoreCase":true
        },
        "validationRegEx":"",
        "validationMessage":"",
        "uiHint":"",
        "label":"Delegation Token",
        "description":"Delegation Token"
      },
      {
        "itemId":5,
        "name":"consumergroup",
        "type":"string",
        "level":1,
        "mandatory":true,
        "lookupSupported":false,
        "recursiveSupported":false,
        "excludesSupported":true,
        "matcher":"org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
        "matcherOptions":{
          "wildCard":true,
          "ignoreCase":true
        },
        "validationRegEx":"",
        "validationMessage":"",
        "uiHint":"",
        "label":"Consumer Group",
        "description":"Consumer Group"
      }
    ],
    "accessTypes": [
      {
        "itemId": 1,
        "name": "publish",
        "label": "Publish",
        "impliedGrants": [
          "describe"
        ]
      },
      {
        "itemId": 2,
        "name": "consume",
        "label": "Consume",
        "impliedGrants": [
          "describe"
        ]
      },
      {
        "itemId": 5,
        "name": "configure",
        "label": "Configure",
        "impliedGrants": [
          "describe"
        ]
      },
      {
        "itemId": 6,
        "name": "describe",
        "label": "Describe",
        "impliedGrants": []
      },
      {
        "itemId": 8,
        "name": "create",
        "label": "Create",
        "impliedGrants": []
      },
      {
        "itemId": 9,
        "name": "delete",
        "label": "Delete",
        "impliedGrants": ["describe"]
      },
      {
        "itemId": 7,
        "name": "kafka_admin",
        "label": "Kafka Admin",
        "impliedGrants": [
          "publish",
          "consume",
          "configure",
          "describe",
          "create",
          "delete",
          "describe_configs",
          "alter_configs",
          "idempotent_write",
          "cluster_action"
        ]
      },
      {
        "itemId":10,
        "name":"idempotent_write",
        "label":"Idempotent Write"
      },
      {
        "itemId":11,
        "name":"describe_configs",
        "label":"Describe Configs"
      },
      {
        "itemId":12,
        "name":"alter_configs",
        "label":"Alter Configs",
        "impliedGrants":[
          "describe_configs"
        ]
      },
      {
        "itemId":13,
        "name":"cluster_action",
        "label":"Cluster Action"
      }
    ],
    "policyConditions": [
      {
        "itemId": 1,
        "name": "ip-range",
        "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerIpMatcher",
        "evaluatorOptions": {},
        "validationRegEx": "",
        "validationMessage": "",
        "uiHint": "",
        "label": "IP Address Range",
        "description": "IP Address Range"
      }
    ],
    "contextEnrichers": [],
    "enums": [],
    "dataMaskDef": {
      "maskTypes": [],
      "accessTypes": [],
      "resources": []
    },
    "rowFilterDef": {
      "accessTypes": [],
      "resources": []
    },
    "id": 9,
    "guid": "be2bf354-612e-495a-85d2-9899a2f60947",
    "isEnabled": true,
    "createTime": "20170217-11:41:32.000-+0000",
    "updateTime": "20170217-11:41:32.000-+0000",
    "version": 1
  },
  "auditMode": "audit-default",
  "tagPolicies": {
    "serviceName": "KafkaTagService",
    "serviceId": 5,
    "policyVersion": 8,
    "policyUpdateTime": "20170220-14:17:29.000-+0000",
    "policies": [
      {
        "service": "KafkaTagService",
        "name": "EXPIRES_ON",
        "policyType": 0,
        "description": "Policy for data with EXPIRES_ON tag",
        "isAuditEnabled": true,
        "resources": {
          "tag": {
            "values": [
              "EXPIRES_ON"
            ],
            "isExcludes": false,
            "isRecursive": false
          }
        },
        "policyItems": [],
        "denyPolicyItems": [
          {
            "accesses": [
              {
                "type": "hdfs:read",
                "isAllowed": true
              },
              {
                "type": "hdfs:write",
                "isAllowed": true
              },
              {
                "type": "hdfs:execute",
                "isAllowed": true
              },
              {
                "type": "hbase:read",
                "isAllowed": true
              },
              {
                "type": "hbase:write",
                "isAllowed": true
              },
              {
                "type": "hbase:create",
                "isAllowed": true
              },
              {
                "type": "hbase:admin",
                "isAllowed": true
              },
              {
                "type": "hive:select",
                "isAllowed": true
              },
              {
                "type": "hive:update",
                "isAllowed": true
              },
              {
                "type": "hive:create",
                "isAllowed": true
              },
              {
                "type": "hive:drop",
                "isAllowed": true
              },
              {
                "type": "hive:alter",
                "isAllowed": true
              },
              {
                "type": "hive:index",
                "isAllowed": true
              },
              {
                "type": "hive:lock",
                "isAllowed": true
              },
              {
                "type": "hive:all",
                "isAllowed": true
              },
              {
                "type": "yarn:submit-app",
                "isAllowed": true
              },
              {
                "type": "yarn:admin-queue",
                "isAllowed": true
              },
              {
                "type": "knox:allow",
                "isAllowed": true
              },
              {
                "type": "storm:submitTopology",
                "isAllowed": true
              },
              {
                "type": "storm:fileUpload",
                "isAllowed": true
              },
              {
                "type": "storm:fileDownload",
                "isAllowed": true
              },
              {
                "type": "storm:killTopology",
                "isAllowed": true
              },
              {
                "type": "storm:rebalance",
                "isAllowed": true
              },
              {
                "type": "storm:activate",
                "isAllowed": true
              },
              {
                "type": "storm:deactivate",
                "isAllowed": true
              },
              {
                "type": "storm:getTopologyConf",
                "isAllowed": true
              },
              {
                "type": "storm:getTopology",
                "isAllowed": true
              },
              {
                "type": "storm:getUserTopology",
                "isAllowed": true
              },
              {
                "type": "storm:getTopologyInfo",
                "isAllowed": true
              },
              {
                "type": "storm:uploadNewCredentials",
                "isAllowed": true
              },
              {
                "type": "kms:create",
                "isAllowed": true
              },
              {
                "type": "kms:delete",
                "isAllowed": true
              },
              {
                "type": "kms:rollover",
                "isAllowed": true
              },
              {
                "type": "kms:setkeymaterial",
                "isAllowed": true
              },
              {
                "type": "kms:get",
                "isAllowed": true
              },
              {
                "type": "kms:getkeys",
                "isAllowed": true
              },
              {
                "type": "kms:getmetadata",
                "isAllowed": true
              },
              {
                "type": "kms:generateeek",
                "isAllowed": true
              },
              {
                "type": "kms:decrypteek",
                "isAllowed": true
              },
              {
                "type": "solr:query",
                "isAllowed": true
              },
              {
                "type": "solr:update",
                "isAllowed": true
              },
              {
                "type": "solr:others",
                "isAllowed": true
              },
              {
                "type": "solr:solr_admin",
                "isAllowed": true
              },
              {
                "type": "kafka:publish",
                "isAllowed": true
              },
              {
                "type": "kafka:consume",
                "isAllowed": true
              },
              {
                "type": "kafka:configure",
                "isAllowed": true
              },
              {
                "type": "kafka:describe",
                "isAllowed": true
              },
              {
                "type": "kafka:create",
                "isAllowed": true
              },
              {
                "type": "kafka:delete",
                "isAllowed": true
              },
              {
                "type": "kafka:kafka_admin",
                "isAllowed": true
              },
              {
                "type": "kafka:cluster_action",
                "isAllowed": true
              },
              {
                "type": "atlas:read",
                "isAllowed": true
              },
              {
                "type": "atlas:create",
                "isAllowed": true
              },
              {
                "type": "atlas:update",
                "isAllowed": true
              },
              {
                "type": "atlas:delete",
                "isAllowed": true
              },
              {
                "type": "atlas:all",
                "isAllowed": true
              }
            ],
            "users": [],
            "groups": [
              "public"
            ],
            "conditions": [
              {
                "type": "accessed-after-expiry",
                "values": [
                  "yes"
                ]
              }
            ],
            "delegateAdmin": false
          }
        ],
        "allowExceptions": [],
        "denyExceptions": [],
        "dataMaskPolicyItems": [],
        "rowFilterPolicyItems": [],
        "id": 10,
        "isEnabled": true,
        "version": 1
      },
      {
        "service": "KafkaTagService",
        "name": "MessagesPolicy",
        "policyType": 0,
        "description": "",
        "isAuditEnabled": true,
        "resources": {
          "tag": {
            "values": [
              "MessagesTag"
            ],
            "isExcludes": false,
            "isRecursive": false
          }
        },
        "policyItems": [
          {
            "accesses": [
              {
                "type": "kafka:consume",
                "isAllowed": true
              },
              {
                "type": "kafka:describe",
                "isAllowed": true
              }
            ],
            "users": [],
            "groups": [
              "public"
            ],
            "conditions": [],
            "delegateAdmin": false
          }
        ],
        "denyPolicyItems": [],
        "allowExceptions": [],
        "denyExceptions": [],
        "dataMaskPolicyItems": [],
        "rowFilterPolicyItems": [],
        "id": 20,
        "isEnabled": true,
        "version": 1
      }
    ],
    "serviceDef": {
      "name": "tag",
      "implClass": "org.apache.ranger.services.tag.RangerServiceTag",
      "label": "TAG",
      "description": "TAG Service Definition",
      "options": {
        "ui.pages": "tag-based-policies"
      },
      "configs": [],
      "resources": [
        {
          "itemId": 1,
          "name": "tag",
          "type": "string",
          "level": 1,
          "mandatory": true,
          "lookupSupported": true,
          "recursiveSupported": false,
          "excludesSupported": false,
          "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
          "matcherOptions": {
            "wildCard": "false",
            "ignoreCase": "false"
          },
          "validationRegEx": "",
          "validationMessage": "",
          "uiHint": "{ \"singleValue\":true }",
          "label": "TAG",
          "description": "TAG"
        }
      ],
      "accessTypes": [
        {
          "itemId": 1002,
          "name": "hdfs:read",
          "label": "Read",
          "impliedGrants": []
        },
        {
          "itemId": 1003,
          "name": "hdfs:write",
          "label": "Write",
          "impliedGrants": []
        },
        {
          "itemId": 1004,
          "name": "hdfs:execute",
          "label": "Execute",
          "impliedGrants": []
        },
        {
          "itemId": 2003,
          "name": "hbase:read",
          "label": "Read",
          "impliedGrants": []
        },
        {
          "itemId": 2004,
          "name": "hbase:write",
          "label": "Write",
          "impliedGrants": []
        },
        {
          "itemId": 2005,
          "name": "hbase:create",
          "label": "Create",
          "impliedGrants": []
        },
        {
          "itemId": 2006,
          "name": "hbase:admin",
          "label": "Admin",
          "impliedGrants": [
            "hbase:read",
            "hbase:write",
            "hbase:create"
          ]
        },
        {
          "itemId": 3004,
          "name": "hive:select",
          "label": "select",
          "impliedGrants": []
        },
        {
          "itemId": 3005,
          "name": "hive:update",
          "label": "update",
          "impliedGrants": []
        },
        {
          "itemId": 3006,
          "name": "hive:create",
          "label": "Create",
          "impliedGrants": []
        },
        {
          "itemId": 3007,
          "name": "hive:drop",
          "label": "Drop",
          "impliedGrants": []
        },
        {
          "itemId": 3008,
          "name": "hive:alter",
          "label": "Alter",
          "impliedGrants": []
        },
        {
          "itemId": 3009,
          "name": "hive:index",
          "label": "Index",
          "impliedGrants": []
        },
        {
          "itemId": 3010,
          "name": "hive:lock",
          "label": "Lock",
          "impliedGrants": []
        },
        {
          "itemId": 3011,
          "name": "hive:all",
          "label": "All",
          "impliedGrants": [
            "hive:select",
            "hive:update",
            "hive:create",
            "hive:drop",
            "hive:alter",
            "hive:index",
            "hive:lock"
          ]
        },
        {
          "itemId": 4005,
          "name": "yarn:submit-app",
          "label": "submit-app",
          "impliedGrants": []
        },
        {
          "itemId": 4006,
          "name": "yarn:admin-queue",
          "label": "admin-queue",
          "impliedGrants": [
            "yarn:submit-app"
          ]
        },
        {
          "itemId": 5006,
          "name": "knox:allow",
          "label": "Allow",
          "impliedGrants": []
        },
        {
          "itemId": 6007,
          "name": "storm:submitTopology",
          "label": "Submit Topology",
          "impliedGrants": [
            "storm:fileUpload",
            "storm:fileDownload"
          ]
        },
        {
          "itemId": 6008,
          "name": "storm:fileUpload",
          "label": "File Upload",
          "impliedGrants": []
        },
        {
          "itemId": 6011,
          "name": "storm:fileDownload",
          "label": "File Download",
          "impliedGrants": []
        },
        {
          "itemId": 6012,
          "name": "storm:killTopology",
          "label": "Kill Topology",
          "impliedGrants": []
        },
        {
          "itemId": 6013,
          "name": "storm:rebalance",
          "label": "Rebalance",
          "impliedGrants": []
        },
        {
          "itemId": 6014,
          "name": "storm:activate",
          "label": "Activate",
          "impliedGrants": []
        },
        {
          "itemId": 6015,
          "name": "storm:deactivate",
          "label": "Deactivate",
          "impliedGrants": []
        },
        {
          "itemId": 6016,
          "name": "storm:getTopologyConf",
          "label": "Get Topology Conf",
          "impliedGrants": []
        },
        {
          "itemId": 6017,
          "name": "storm:getTopology",
          "label": "Get Topology",
          "impliedGrants": []
        },
        {
          "itemId": 6018,
          "name": "storm:getUserTopology",
          "label": "Get User Topology",
          "impliedGrants": []
        },
        {
          "itemId": 6019,
          "name": "storm:getTopologyInfo",
          "label": "Get Topology Info",
          "impliedGrants": []
        },
        {
          "itemId": 6020,
          "name": "storm:uploadNewCredentials",
          "label": "Upload New Credential",
          "impliedGrants": []
        },
        {
          "itemId": 7008,
          "name": "kms:create",
          "label": "Create",
          "impliedGrants": []
        },
        {
          "itemId": 7009,
          "name": "kms:delete",
          "label": "Delete",
          "impliedGrants": []
        },
        {
          "itemId": 7010,
          "name": "kms:rollover",
          "label": "Rollover",
          "impliedGrants": []
        },
        {
          "itemId": 7011,
          "name": "kms:setkeymaterial",
          "label": "Set Key Material",
          "impliedGrants": []
        },
        {
          "itemId": 7012,
          "name": "kms:get",
          "label": "Get",
          "impliedGrants": []
        },
        {
          "itemId": 7013,
          "name": "kms:getkeys",
          "label": "Get Keys",
          "impliedGrants": []
        },
        {
          "itemId": 7014,
          "name": "kms:getmetadata",
          "label": "Get Metadata",
          "impliedGrants": []
        },
        {
          "itemId": 7015,
          "name": "kms:generateeek",
          "label": "Generate EEK",
          "impliedGrants": []
        },
        {
          "itemId": 7016,
          "name": "kms:decrypteek",
          "label": "Decrypt EEK",
          "impliedGrants": []
        },
        {
          "itemId": 8108,
          "name": "solr:query",
          "label": "Query",
          "impliedGrants": []
        },
        {
          "itemId": 8208,
          "name": "solr:update",
          "label": "Update",
          "impliedGrants": []
        },
        {
          "itemId": 8308,
          "name": "solr:others",
          "label": "Others",
          "impliedGrants": []
        },
        {
          "itemId": 8908,
          "name": "solr:solr_admin",
          "label": "Solr Admin",
          "impliedGrants": [
            "solr:query",
            "solr:update",
            "solr:others"
          ]
        },
        {
          "itemId": 9010,
          "name": "kafka:publish",
          "label": "Publish",
          "impliedGrants": [
            "kafka:describe"
          ]
        },
        {
          "itemId": 9011,
          "name": "kafka:consume",
          "label": "Consume",
          "impliedGrants": [
            "kafka:describe"
          ]
        },
        {
          "itemId": 9014,
          "name": "kafka:configure",
          "label": "Configure",
          "impliedGrants": [
            "kafka:describe"
          ]
        },
        {
          "itemId": 9015,
          "name": "kafka:describe",
          "label": "Describe",
          "impliedGrants": []
        },
        {
          "itemId": 9017,
          "name": "kafka:create",
          "label": "Create",
          "impliedGrants": []
        },
        {
          "itemId": 9018,
          "name": "kafka:delete",
          "label": "Delete",
          "impliedGrants": [
            "kafka:describe"
          ]
        },
        {
          "itemId": 9016,
          "name": "kafka:kafka_admin",
          "label": "Kafka Admin",
          "impliedGrants": [
            "kafka:publish",
            "kafka:consume",
            "kafka:configure",
            "kafka:describe",
            "kafka:create",
            "kafka:delete",
            "kafka:describe_configs",
            "kafka:alter_configs",
            "kafka:idempotent_write",
            "kafka:cluster_action"
          ]
        },
        {
          "itemId":9019,
          "name":"idempotent_write",
          "label":"Idempotent Write"
        },
        {
          "itemId":9020,
          "name":"describe_configs",
          "label":"Describe Configs"
        },
        {
          "itemId":9021,
          "name":"alter_configs",
          "label":"Alter Configs",
          "impliedGrants":[
            "describe_configs"
          ]
        },
        {
          "itemId":9022,
          "name":"cluster_action",
          "label":"Cluster Action",
          "impliedGrants": []
        },
        {
          "itemId": 11012,
          "name": "atlas:read",
          "label": "read",
          "impliedGrants": []
        },
        {
          "itemId": 11013,
          "name": "atlas:create",
          "label": "create",
          "impliedGrants": []
        },
        {
          "itemId": 11014,
          "name": "atlas:update",
          "label": "update",
          "impliedGrants": []
        },
        {
          "itemId": 11015,
          "name": "atlas:delete",
          "label": "delete",
          "impliedGrants": []
        },
        {
          "itemId": 11016,
          "name": "atlas:all",
          "label": "All",
          "impliedGrants": [
            "atlas:read",
            "atlas:create",
            "atlas:update",
            "atlas:delete"
          ]
        }
      ],
      "policyConditions": [
        {
          "itemId": 1,
          "name": "accessed-after-expiry",
          "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator",
          "evaluatorOptions": {
            "scriptTemplate": "ctx.isAccessedAfter(\u0027expiry_date\u0027);"
          },
          "uiHint": "{ \"singleValue\":true }",
          "label": "Accessed after expiry_date (yes/no)?",
          "description": "Accessed after expiry_date? (yes/no)"
        }
      ],
      "contextEnrichers": [
        {
          "itemId": 1,
          "name": "TagEnricher",
          "enricher": "org.apache.ranger.plugin.contextenricher.RangerTagEnricher",
          "enricherOptions": {
            "tagRetrieverClassName": "org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever",
            "tagRefresherPollingInterval": "60000"
          }
        }
      ],
      "enums": [],
      "dataMaskDef": {
        "maskTypes": [],
        "accessTypes": [],
        "resources": []
      },
      "rowFilterDef": {
        "accessTypes": [],
        "resources": []
      },
      "id": 100,
      "guid": "0d047248-baff-4cf9-8e9e-d5d377284b2e",
      "isEnabled": true,
      "createTime": "20170217-11:41:33.000-+0000",
      "updateTime": "20170217-11:41:35.000-+0000",
      "version": 11
    },
    "auditMode": "audit-default"
  }
}