[
https://issues.apache.org/jira/browse/RANGER-1176?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16200315#comment-16200315
]
Nitin Galave commented on RANGER-1176:
--------------------------------------
Committed to
[master|https://github.com/apache/ranger/commit/ca9b5f51241a802b0d28152779fe22412dd2f774],
[ranger-0.7|https://github.com/apache/ranger/commit/9ac77670278895b62400af61e8c351b13550e8ed]
branch.
> Ranger admin does not allow to create / update a policy with only delegate
> admin permission
> -------------------------------------------------------------------------------------------
>
> Key: RANGER-1176
> URL: https://issues.apache.org/jira/browse/RANGER-1176
> Project: Ranger
> Issue Type: Bug
> Components: admin
> Affects Versions: 0.5.0
> Reporter: Vipin Rathor
> Assignee: Nitin Galave
> Priority: Minor
> Fix For: 1.0.0, 0.7.2
>
> Attachments: RANGER-1176.patch
>
>
> As of RANGER-436, a policy with empty access list is valid if delegated admin
> is true. But the Ranger Admin UI doesn't allow user to create / update a
> policy with only the 'delegate admin' permission for a user / group.
> Expected Result:
> Create / update policy with only 'delegate admin' permission should be
> allowed via Ranger Admin UI
> Actual Result:
> Upon saving, the create page throws this error for user:
> "Please add permission(s) for the selected User, else User will not be added."
> And similar error for group:
> "Please add permission(s) for the selected Group, else Group will not be
> added."
> Workaround:
> As of now, the workaround is to create / update the policy via REST API. But
> the only caveat is user will not be able to edit the policy again via Admin
> UI.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
