NIFI - policies for Connection

[#1]

Hi all,

In the WEB UI NFI, I can find where modifie the policies to have permission to list/empty queue

thanks for help.

[#2]

I believe that "List Queue" would be a "View Data" policy on the source, and "Empty Queue" would be a "Modify Data" on the source component. Also keep in mind that if you are clustered, all of the nodes in the cluster also need to be part of this policy because all entities (users + machines) involved in the request need to be authorized for the data.

[#3]

Hi Bryan,

What Ranger's policy should be added for the "list queue" and "empty queue"? I tried /ViewData, /flowfile-queues, /View_Data but none of them works.

Thanks, SJ

[#4]

@Sanaz Janbakhsh

This question revolves around setting the correct file based authorizer permissions for listing and emptying queues.

Since you are using Ranger , I suggest starting a new question so as not add confusion as process is different.

Thanks,

Matt

[#5]

Hi Matt,

There is already one

https://community.hortonworks.com/questions/114805/lost-some-permission-after-integrating-ranger-and...

Thanks

SJ

[#6]

Thank you.

[#7]

Hi all

I've set 'admin nifi' in "view the data"

It's not work, I always permissions denied.

Admin Nifi contains my user, and all nifi nodes (nifi001..nifi004)

[#8]

@mayki wogno

view the data will give you the ability to list the queue, but will not give you the ability to empty the queue. You need to give yoru nodes and the user making teh request teh ability to "modify teh data" as well.

[#9]

If after adding "modify the data" policy it still does not work, check the nifi-user.log to see what entity it is having permissions problems with? Did you set processor level policies on the processors on each side of this queued connection?