search

opensearch-project / security

🔐 Secure your cluster with TLS, numerous authentication backends, data masking, audit logging as well as role-based access control on indices, documents, and fields
https://opensearch.org/docs/latest/security-plugin/index/
Apache License 2.0
192 stars 274 forks source link

Make PrivilegesEvaluator extensible through config #713

Closed divyansh-jain-guavus closed 1 year ago

divyansh-jain-guavus commented 4 years ago

In this PR I have made PrivilegesEvaluator extensible through a config opendistro_security.privileges_evaluator

One can see the detailed discussion on the community https://discuss.opendistrocommunity.dev/t/make-privilegesevaluator-extensible-through-config-contribute-to-the-repo/2951

We want to integrate opendistro security with apache ranger and we have done this for es 6.8.3, opendistro-0.10 https://github.com/ThalesGroup/opendistro-security/tree/opendistro-0.10 https://github.com/ThalesGroup/reflex-elasticsearch-ranger/tree/master/ranger-privileges-evaluator

We want it to contribute this feature, so we can focus on the ranger evaluator for the newer versions

stephen-crawford commented 1 year ago

[Triage] Closing this issue in favor of the Identity project which will allow for greater extensibility of the project. If this feature is still something you would like to see, please open a new issue against the Identity project.