RANGER-5393: updated RangerOzoneAuthorizer to support AssumeRole

[mneethiraj]

What changes were proposed in this pull request?

RangerOzoneAuthorizer updated to implemement new method, IAccessAuthorizer.generateAssumeRoleSessionPolicy(), introduced in Ozone with HDDS-13848.

How was this patch tested?

Unit tests added to validate:

• generation of session policy
• authorize access via session policy

[Copilot]

Pull request overview

This PR updates RangerOzoneAuthorizer to support Ozone's AssumeRole functionality by implementing the new IAccessAuthorizer.generateAssumeRoleSessionPolicy() method introduced in Ozone 2.1.0 (HDDS-13848). The implementation enables role-based access control with session policies that can be used to grant temporary permissions.

Key Changes:

• Added support for the assume_role access type and role resource in the Ozone service definition
• Implemented session policy generation that validates assume role permissions and creates inline policies with optional grants
• Upgraded Ozone dependency from 1.4.0 to 2.1.0 to support the new AssumeRole API

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
ranger-ozone-plugin-shim/src/main/java/org/apache/ranger/authorization/ozone/authorizer/RangerOzoneAuthorizer.java	Added shim method to delegate generateAssumeRoleSessionPolicy calls to the plugin implementation
plugin-ozone/src/main/java/org/apache/ranger/authorization/ozone/authorizer/RangerOzoneAuthorizer.java	Core implementation of session policy generation with role authorization validation and grant conversion
agents-common/src/main/resources/service-defs/ranger-servicedef-ozone.json	Added role resource definition and assume_role access type with appropriate restrictions
plugin-ozone/src/test/java/org/apache/ranger/authorization/ozone/authorizer/TestRangerOzoneAuthorizer.java	Comprehensive tests validating role assumption authorization and session policy enforcement
plugin-ozone/src/test/resources/om_dev_ozone.json	Test policy configuration with assume_role permissions and role-based grants
plugin-ozone/src/test/resources/ranger-ozone-security.xml	Test configuration for embedded policy source
plugin-ozone/pom.xml	Added test dependencies for JUnit Jupiter and Mockito
pom.xml	Upgraded Ozone version and added staging repository for RC

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[fmorg-git]

thanks for the updates @mneethiraj - LGTM

[Copilot]

Pull request overview

Copilot reviewed 8 out of 8 changed files in this pull request and generated 3 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 8 out of 8 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 8 out of 8 changed files in this pull request and generated 2 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.