Abhay Kulkarni created RANGER-2405:
--------------------------------------

             Summary: Evaluation of Ranger policies targeted to valid but 
partial resources
                 Key: RANGER-2405
                 URL: https://issues.apache.org/jira/browse/RANGER-2405
             Project: Ranger
          Issue Type: Bug
          Components: plugins, Ranger
    Affects Versions: master
            Reporter: Abhay Kulkarni
            Assignee: Abhay Kulkarni
             Fix For: master


With RANGER-1781, Ranger supports resource policies with valid, but partial 
hierarchies specified as the resource. However, during policy evaluation, a 
partial hierarchy is treated as a complete hierarchy with the unspecified part 
of the resource hierarchy as having been specified with an all-matching 
wildcard value (that is, as an asterisk). This leads to such policy matching an 
accessed resource which has more resource levels than in the policy, and is 
more permissive than the policy specification.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to