jerqi opened a new issue, #5130:
URL: https://github.com/apache/gravitino/issues/5130
### Describe the subtask
Fail to delete the role for the authorization plugin
```
024-10-14 12:57:37.589 WARN [Gravitino-webserver-41]
[org.apache.gravitino.authorization.ranger.RangerAuthorizationPlugin.doRemoveSecurableObject(RangerAuthorizationPlugin.java:470)]
- Cannot find the Ranger policy(role1) for the Gravitino securable
object(catalog_hive.access_control)!
2024-10-14 12:57:37.632 WARN [Gravitino-webserver-41]
[org.apache.gravitino.authorization.ranger.RangerAuthorizationPlugin.onRoleDeleted(RangerAuthorizationPlugin.java:142)]
- Ranger delete role: org.apache.gravitino.meta.RoleEntity@4af36103 failed!
org.apache.ranger.RangerServiceException: Ranger API
org.apache.ranger.RangerClient$API@3c684115 failed: statusCode=400, status=Bad
Request, response:{"statusCode":1,"msgDesc":"Role 'role1' can not be deleted as
it is referenced in one or more policies"}
at
org.apache.ranger.RangerClient.responseHandler(RangerClient.java:521) ~[?:?]
at org.apache.ranger.RangerClient.callAPI(RangerClient.java:531)
~[?:?]
at org.apache.ranger.RangerClient.deleteRole(RangerClient.java:387)
~[?:?]
at
org.apache.gravitino.authorization.ranger.RangerAuthorizationPlugin.onRoleDeleted(RangerAuthorizationPlugin.java:139)
~[?:?]
at
org.apache.gravitino.authorization.RoleManager.lambda$deleteRole$2(RoleManager.java:152)
~[gravitino-core-0.6.0-incubating.jar:?]
at
org.apache.gravitino.authorization.AuthorizationUtils.callAuthorizationPluginImpl(AuthorizationUtils.java:192)
~[gravitino-core-0.6.0-incubating.jar:?]
at
org.apache.gravitino.authorization.AuthorizationUtils.callAuthorizationPluginForSecurableObjects(AuthorizationUtils.java:163)
~[gravitino-core-0.6.0-incubating.jar:?]
at
org.apache.gravitino.authorization.RoleManager.deleteRole(RoleManager.java:148)
~[gravitino-core-0.6.0-incubating.jar:?]
at
org.apache.gravitino.authorization.AccessControlManager.deleteRole(AccessControlManager.java:144)
~[gravitino-core-0.6.0-incubating.jar:?]
at
org.apache.gravitino.hook.AccessControlHookDispatcher.deleteRole(AccessControlHookDispatcher.java:148)
~[gravitino-core-0.6.0-incubating.jar:?]
at
org.apache.gravitino.server.web.rest.RoleOperations.lambda$deleteRole$6(RoleOperations.java:163)
~[gravitino-server-0.6.0-incubating.jar:?]
at
org.apache.gravitino.lock.TreeLockUtils.doWithTreeLock(TreeLockUtils.java:49)
~[gravitino-core-0.6.0-incubating.jar:?]
at
org.apache.gravitino.server.web.rest.RoleOperations.lambda$deleteRole$7(RoleOperations.java:160)
~[gravitino-server-0.6.0-incubating.jar:?]
at
java.base/java.security.AccessController.doPrivileged(AccessController.java:712)
~[?:?]
at java.base/javax.security.auth.Subject.doAs(Subject.java:439)
~[?:?]
at
org.apache.gravitino.utils.PrincipalUtils.doAs(PrincipalUtils.java:39)
~[gravitino-core-0.6.0-incubating.jar:?]
at org.apache.gravitino.server.web.Utils.doAs(Utils.java:149)
~[gravitino-server-0.6.0-incubating.jar:?]
at
org.apache.gravitino.server.web.rest.RoleOperations.deleteRole(RoleOperations.java:156)
~[gravitino-server-0.6.0-incubating.jar:?]
```
### Parent issue
#5115
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
