Uploaded image for project: 'CDAP'
  1. CDAP
  2. CDAP-882 Authorization in CDAP
  3. CDAP-4285

Dataset-based authorization plugin

    XMLWordPrintableJSON

    Details

    • Type: Sub-task
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.3.0
    • Component/s: Security
    • Labels:
      None
    • Release Notes:
      Added an authorization plugin that uses a system dataset to manage ACLs
    • Rank:
      1|hzz3cv:

      Description

      i) Uses ACLDataset to implement the DatasetBacked Pluggable Authorization Framework.

      ii) Table design should accommodate various use cases - fetching users that have access to a specific entity; fetching entities that a specific user has access too etc.

      iii) Should have the ability to delete the child entities when the parent entity ACL is removed.

      iv) Investigate the possibility of pushing assigning HBase ACLs for ACLDataset for "admin" users in distributed mode.

      Should

        Attachments

          Activity

            People

            • Assignee:
              alvin Alvin Wang
              Reporter:
              gokul Gokul Gunasekaran
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: