Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 5DFD0200C55 for ; Thu, 30 Mar 2017 01:35:55 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 5C8B8160B95; Wed, 29 Mar 2017 23:35:55 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id A40C1160B8A for ; Thu, 30 Mar 2017 01:35:54 +0200 (CEST) Received: (qmail 57621 invoked by uid 500); 29 Mar 2017 23:35:53 -0000 Mailing-List: contact commits-help@hawq.incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@hawq.incubator.apache.org Delivered-To: mailing list commits@hawq.incubator.apache.org Received: (qmail 57612 invoked by uid 99); 29 Mar 2017 23:35:53 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 29 Mar 2017 23:35:53 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 629FAC050B for ; Wed, 29 Mar 2017 23:35:53 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -4.222 X-Spam-Level: X-Spam-Status: No, score=-4.222 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=disabled Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id bAdivdA6Ttf6 for ; Wed, 29 Mar 2017 23:35:52 +0000 (UTC) Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with SMTP id 9F6AB5F2FE for ; Wed, 29 Mar 2017 23:35:51 +0000 (UTC) Received: (qmail 57607 invoked by uid 99); 29 Mar 2017 23:35:50 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 29 Mar 2017 23:35:50 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id A5202DFBED; Wed, 29 Mar 2017 23:35:50 +0000 (UTC) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: lisao@apache.org To: commits@hawq.incubator.apache.org Message-Id: <68090d0181dd485bbd48dfef68fafa96@git.apache.org> X-Mailer: ASF-Git Admin Mailer Subject: incubator-hawq-docs git commit: policy doc - unique ids for sections Date: Wed, 29 Mar 2017 23:35:50 +0000 (UTC) archived-at: Wed, 29 Mar 2017 23:35:55 -0000 Repository: incubator-hawq-docs Updated Branches: refs/heads/feature/ranger-integration 0b8a4dbb5 -> 68c25b5b7 policy doc - unique ids for sections Project: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/commit/68c25b5b Tree: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/tree/68c25b5b Diff: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/diff/68c25b5b Branch: refs/heads/feature/ranger-integration Commit: 68c25b5b77649ba8c8d24d55d2e3b6b1dca2a7a8 Parents: 0b8a4db Author: Lisa Owen Authored: Wed Mar 29 16:35:44 2017 -0700 Committer: Lisa Owen Committed: Wed Mar 29 16:35:44 2017 -0700 ---------------------------------------------------------------------- markdown/ranger/ranger-policy-creation.html.md.erb | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/blob/68c25b5b/markdown/ranger/ranger-policy-creation.html.md.erb ---------------------------------------------------------------------- diff --git a/markdown/ranger/ranger-policy-creation.html.md.erb b/markdown/ranger/ranger-policy-creation.html.md.erb index 9523c77..c66f5ba 100644 --- a/markdown/ranger/ranger-policy-creation.html.md.erb +++ b/markdown/ranger/ranger-policy-creation.html.md.erb @@ -105,7 +105,7 @@ Ranger evaluates policies from most to least restrictive, searching for a policy Refer to the [Ranger User Guide ??apache or hortonworks??](https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.0/bk_Ranger_User_Guide/bk_Ranger_User_Guide-20160301.pdf) and [Deny-conditions and excludes in Ranger policies](https://cwiki.apache.org/confluence/display/RANGER/Deny-conditions+and+excludes+in+Ranger+policies) for detailed information on the Ranger Admin UI and Ranger policy evaluation. -## HAWQ Policy Definition +## HAWQ Policy Definition When configuring a HAWQ-Ranger authorization policy, you: @@ -162,7 +162,7 @@ You may identify one or more users and/or groups to which to provide or deny acc | User | \ | The user(s) to which you want to provide or deny access. All users sync'd from \ or explicitly registered via the Ranger Admin UI are available in the picklist. | -#### Identifying Permissions +#### Identifying Permissions You can assign users/groups the following permissions when allowing or denying access to specific HAWQ resources: @@ -196,7 +196,7 @@ It may take a collection of policies to provide access to a specific HAWQ databa MORE HERE -### Wildcarding in HAWQ Policies +### Wildcarding in HAWQ Policies When defining a HAWQ policy, wildcarding (`*`) a leaf node resource will scope the policy at two levels: @@ -349,7 +349,7 @@ specifying these permissions: | create | CREATE TABLE ... TABLESPACE | GRANT CREATE ON \ TO \ | -### Policies for Protocol Operations +### Policies for Protocol Operations ??gpfdist(s) and http protocols - hawq-native or ranger? super-user?