Group: Devlive Grantforge

Sort by:Popular▼

✓Popular✓Newest

What every agent in a protected system shares: downloads and checks the signed policy snapshots of its service, keeps the last one on disk, decides access with the policy engine and ships access events; runs on Java 8 with the engine, ...

Contract between the server and service type plugins: the service type definition model, the provider SPI and the plugin descriptor. Depends on nothing but JSpecify and is versioned on its own (ApiVersion).

Shared test utilities and architecture rules; used with test scope only

Framework-free building blocks: null-safe helpers, error codes and pagination models

Database-portable persistence foundation: IDs, base entity, naming rules and query helpers

What the agents that run beside a protected system share, which keep its own access control in step with the policies instead of standing in its request path: the launcher and its settings, the timers that sync and read the system's ...

Append-only audit trail of security events

Shared Java 8 native permission, inode, lifecycle and metrics adapter compiled against the Hadoop 2.7 baseline

Tenants, user accounts, password hashing and first-run setup

What the Trino agents of every Trino line share, without Trino's SPI: the agent's settings and lifecycle, decisions at every scope of a catalog, schema, table and column, the decisions kept for repeated checks, listings filtered to ...

The resource catalog (applications, menus, pages, buttons, APIs), roles and grants

The ClickHouse service type in ClickHouse's own terms: databases, their tables and the tables' columns, and the server as a whole, with access types that map to ClickHouse's privileges, and row filters that become ClickHouse row ...

The Apache HBase service type in HBase's own terms: the global scope, namespaces, tables, column families and columns, with HBase's read, write, create and admin as access types. Lookups go through HBase's own client, on Hadoop's ...

The HDFS service type (M13-03), modelled on Apache Ranger's: paths with read, write and execute, looked up and tested with Hadoop's own (shaded) client over hdfs:// RPC, HA nameservices or webhdfs://, with simple or Kerberos ...

The Apache Hive service type, as Apache Ranger defines it: databases, tables, columns and UDFs, URLs, the HiveServer2 service and replication, with Hive's access types, column masking and table row filters. Lookups go through ...

Loads service type plugins: built-in ones from the classpath, external ones from the plugins directory, each in its own class loader

The Apache Kafka service type: topics, consumer groups, transactional IDs, the cluster, delegation tokens and users, with Kafka's own operations as access types, so policies read like Kafka ACLs. Lookups go through Kafka's AdminClient ...

The MySQL service type: databases, tables and columns with MySQL's own privileges, column masking and table row filters, looked up and tested through MariaDB Connector/J (LGPL), which speaks MySQL's protocol and is the driver ...

The OpenSearch service type in OpenSearch's own terms: indices and data streams, their fields, and the cluster as a whole, with access types that map to the security plugin's action groups, row filters that become document level ...

The PostgreSQL service type in PostgreSQL's own terms: databases, their schemas, the schemas' tables and views and the tables' columns, with access types that map to PostgreSQL's privileges, and row filters that become row security ...