@Vipin Rathor Great question 🙂 I have implemented a script at one of my customer that is actually adding policies and hdfs directories automatically as soon as a new users joins an AD group, so here is the part about how to use the RestAPI of Ranger to add policies.
HDFS Policy
Template:
{
"policyName": "name_of_policy",
"resourceName": "/path1,/path2/blub",
"description": "",
"repositoryName": "",
"repositoryType": "hdfs",
"isEnabled": "true",
"isRecursive": "true",
"isAuditEnabled": "true",
"permMapList": [{
"groupList": ["somegroup"],
"permList": ["Read","Execute", "Write", "Admin"]
}]
}
Curl:
curl -iv -u <user>:<password> -d @<policy payload> -H "Content-Type: application/json" -X POST http://<RANGER-Host>:6080/service/public/api/policy/
Hive Policy
Template:
{
"policyName":"name_of_policy",
"databases":"db1,db2",
"tables":"mytable,yourtable",
"columns":"",
"udfs":"",
"description":"",
"repositoryName":"",
"repositoryType":"hive",
"tableType":"Inclusion",
"columnType":"Inclusion",
"isEnabled":"true",
"isAuditEnabled":"true",
"permMapList": [{
"groupList": ["somegroup"],
"permList": ["Select"]
}]
}
Curl:
curl -iv -u <user>:<password> -d @<policy payload> -H "Content-Type: application/json" -X POST http://<RANGER-Host>:6080/service/public/api/policy/
Getting Policies
I just tested the Rest API to get some of my policies from Ranger, it worked. Make sure the Policy ID is valid, otherwise you'll get a "Data not found" error.
Curl
curl -iv -u <user>:<password> -H "Content-type:application/json" -X GET http://horton01.example.com:6080/service/public/api/policy/2
Result:
{
"id":2,
"createDate":"2015-11-21T07:03:21Z",
"updateDate":"2015-12-08T05:54:24Z",
"owner":"Admin",
"updatedBy":"Admin",
"policyName":"Ranger_audits",
"resourceName":"/apps/solr/ranger_audits",
"description":"",
"repositoryName":"bigdata_hadoop",
"repositoryType":"hdfs",
"permMapList":[
{
"userList":[
"solr"
],
"groupList":[
],
"permList":[
"Read",
"Write",
"Execute"
]
}
],
"isEnabled":true,
"isRecursive":true,
"isAuditEnabled":false,
"version":"5",
"replacePerm":false
}
Let me know if you have any questions
