New authorizer

atlanhq · Jan 23, 2024 · 6359958 · 6359958
1 parent bfcad2a
commit 6359958
Show file tree

Hide file tree

Showing 55 changed files with 5,956 additions and 2,059 deletions.
diff --git a/addons/models/0000-Area0/0010-base_model.json b/addons/models/0000-Area0/0010-base_model.json
@@ -640,6 +640,17 @@
           "skipScrubbing": true,
           "includeInNotification": true
         },
+        {
+          "name": "abacService",
+          "typeName": "string",
+          "indexType": "STRING",
+          "cardinality": "SINGLE",
+          "isIndexable": false,
+          "isOptional": true,
+          "isUnique": false,
+          "skipScrubbing": true,
+          "includeInNotification": true
+        },
         {
           "name": "authServiceIsEnabled",
           "typeName": "boolean",
@@ -681,9 +692,19 @@
         "Asset"
       ],
       "serviceType": "atlan",
-      "typeVersion": "1.1",
+      "typeVersion": "1.2",
       "attributeDefs":
       [
+        {
+          "name": "policyFilterCriteria",
+          "typeName": "string",
+          "cardinality": "SINGLE",
+          "isIndexable": false,
+          "isOptional": true,
+          "isUnique": false,
+          "skipScrubbing": true,
+          "includeInNotification": true
+        },
         {
           "name": "policyType",
           "typeName": "AuthPolicyType",

diff --git a/addons/policies/atlas_service.json b/addons/policies/atlas_service.json
@@ -12,6 +12,18 @@
         }
       }
     },
+    {
+      "typeName": "AuthService",
+      "attributes":
+      {
+        "qualifiedName": "auth_service_atlas_abac",
+        "name": "atlas_abac",
+        "authServiceType": "abac",
+        "authServiceConfig": {
+          "ranger.plugin.audit.filters": "[{'accessResult':'DENIED','isAudited':true}]"
+        }
+      }
+    },
     {
       "typeName": "AuthService",
       "attributes":
@@ -20,6 +32,7 @@
         "name": "atlas",
         "authServiceType": "atlas",
         "tagService": "atlas_tag",
+        "abacService": "atlas_abac",
         "authServiceConfig": {
           "ranger.plugin.audit.filters": "[ {'accessResult': 'DENIED', 'isAudited': true}, {'users':['atlas'] ,'isAudited':false} ]"
         }
@@ -33,6 +46,7 @@
         "name": "heka",
         "authServiceType": "heka",
         "tagService": "atlas_tag",
+        "abacService": "atlas_abac",
         "authServiceConfig": {}
       }
     }

diff --git a/auth-agents-common/pom.xml b/auth-agents-common/pom.xml
@@ -55,6 +55,13 @@
             <version>${project.version}</version>
         </dependency>
 
+
+        <dependency>
+            <groupId>org.apache.atlas</groupId>
+            <artifactId>auth-common</artifactId>
+            <version>${project.version}</version>
+        </dependency>
+
         <dependency>
             <groupId>org.apache.atlas</groupId>
             <artifactId>auth-audits</artifactId>

diff --git a/auth-agents-common/src/main/java/org/apache/atlas/plugin/model/RangerBaseModelObject.java b/auth-agents-common/src/main/java/org/apache/atlas/plugin/model/RangerBaseModelObject.java