[
https://issues.apache.org/jira/browse/RANGER-1346?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15851251#comment-15851251
]
Mugdha Varadkar commented on RANGER-1346:
-----------------------------------------
[~krisss] Please reassign to yourself. I reassigned it to me by mistake.
> Policies are matched against wildcard path for location
> -------------------------------------------------------
>
> Key: RANGER-1346
> URL: https://issues.apache.org/jira/browse/RANGER-1346
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Affects Versions: 0.6.0
> Reporter: Krzysztof Adamski
> Labels: security
> Attachments: Ranger1.png, Ranger2.png, Ranger3.png
>
>
> A policy in Ranger is being picked up based on the destination path. All the
> destination paths that match the substring are being picked up. This is
> undesired and it breaks the security concept.
> e.g. for the path
> /test1234
> a policy for path
> /test
> will be used.
> See details in attachments.
> No additional permission on hdfs to exclude fallback.
> Tested on Ranger 0.6.0.2.5 HDP 2.5.
> hdfs dfs –ls / | grep test
> d--------- - hdfs hdfs 0 2017-02-02 14:17 /test
> d--------- - hdfs hdfs 0 2017-02-02 14:18 /test1234
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
