chungen0126 commented on PR #11053: URL: https://github.com/apache/ozone/pull/11053#issuecomment-6186372587
I've added the different combinations of `ozone.s3g.sts.http.enabled` and `ranger.servicedef.ozone.enableActionMatcherInPoliciesCondition` to the design doc, though covering all these edge cases makes it quite complex. If everyone agrees, I would prefer to only document the scenario where **both flags are enabled** for S3 fine-grained access control, and treat all other cases as opting out of S3 action-level permissions (defaulting to base ACL/Ranger permissions). Let me know if that sounds good! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
