-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/72674/
-----------------------------------------------------------
Review request for ranger, Dineshkumar Yadav, Madhan Neethiraj, and Velmurugan
Periasamy.
Bugs: RANGER-2858
https://issues.apache.org/jira/browse/RANGER-2858
Repository: ranger
Description
-------
Permission is granted for 'any' access for a non-empty resource if any policy
in any security zone allows permission. Only the policies in the security zone
for the accessed resource should be considered for authorization in such
scenario.
Diffs
-----
agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineImpl.java
dbdb78048
Diff: https://reviews.apache.org/r/72674/diff/1/
Testing
-------
Tested for hive service, by exercising 'use <database>' command using beeline.
Verified that only the policies in the security zone which contains resource
<database> are evaluated for access.
Thanks,
Abhay Kulkarni
