Group: Devlive Grantforge

Sort by:Popular▼

✓Popular✓Newest

Shared test utilities and architecture rules; used with test scope only

Contract between the server and service type plugins: the service type definition model, the provider SPI and the plugin descriptor. Depends on nothing but JSpecify and is versioned on its own (ApiVersion).

What every agent in a protected system shares: downloads and checks the signed policy snapshots of its service, keeps the last one on disk, decides access with the policy engine and ships access events; runs on Java 8 with the engine, ...

Framework-free building blocks: null-safe helpers, error codes and pagination models

Database-portable persistence foundation: IDs, base entity, naming rules and query helpers

Shared Java 8 native permission, inode, lifecycle and metrics adapter compiled against the Hadoop 2.7 baseline

Append-only audit trail of security events

Tenants, user accounts, password hashing and first-run setup

What the Trino agents of every Trino line share, without Trino's SPI: the agent's settings and lifecycle, decisions at every scope of a catalog, schema, table and column, the decisions kept for repeated checks, listings filtered to ...

The resource catalog (applications, menus, pages, buttons, APIs), roles and grants

The Apache HBase service type in HBase's own terms: the global scope, namespaces, tables, column families and columns, with HBase's read, write, create and admin as access types. Lookups go through HBase's own client, on Hadoop's ...

The HDFS service type (M13-03), modelled on Apache Ranger's: paths with read, write and execute, looked up and tested with Hadoop's own (shaded) client over hdfs:// RPC, HA nameservices or webhdfs://, with simple or Kerberos ...

The Apache Hive service type, as Apache Ranger defines it: databases, tables, columns and UDFs, URLs, the HiveServer2 service and replication, with Hive's access types, column masking and table row filters. Lookups go through ...

Loads service type plugins: built-in ones from the classpath, external ones from the plugins directory, each in its own class loader

The Apache Kafka service type: topics, consumer groups, transactional IDs, the cluster, delegation tokens and users, with Kafka's own operations as access types, so policies read like Kafka ACLs. Lookups go through Kafka's AdminClient ...

The MySQL service type: databases, tables and columns with MySQL's own privileges, column masking and table row filters, looked up and tested through MariaDB Connector/J (LGPL), which speaks MySQL's protocol and is the driver ...

The Trino service type in Trino's own terms: catalogs, schemas, tables, columns, routines, session properties, users and system information, with row filters and column masks written as Trino SQL. Lookups go through Trino's JDBC ...

The Apache Hadoop YARN service type in YARN's own terms: queues, decided at every queue of their path as YARN's own queue ACLs are, applications by name within a queue, and the cluster's administration, with YARN's submit and ...

The ZooKeeper service type: znode paths with ZooKeeper's own permissions (read, write, create, delete, admin), looked up, browsed and tested with ZooKeeper's own client over an ensemble's connection string, with no, digest or Kerberos ...

Enforces GrantForge policies inside HBase 2.5 and later masters and region servers: a coprocessor that checks table, namespace and cluster operations, reads and writes against the service's signed policy snapshot, returns only the ...