[
https://issues.apache.org/jira/browse/RANGER-3462?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Abhay Kulkarni updated RANGER-3462:
-----------------------------------
Description:
Steps to reproduce the issue:
# Create users in Ranger alice, bob, and charlie. Alice has admin role, bob
and charlie has user role.
# Create an HDFS policy with name "test-delegate-admin" as alice. In that
policy there 2 policy items; one for bob, and the other for alice with RWX
permissions with "Delegate Admin".
# Log in as bob, and edited the policy item for bob: removed Write permission.
# After saving the policy bob is not able to see to policy anymore. It only
becomes visible after the Write permission is restored.
was:
Steps to reproduce the issue:
# Create users in Ranger alice, bob, and charlie. Alice has admin role, bob
and charlie has user role.
# Create an HDFS policy with name "test-delegate-admin" as alice. In that
policy there 2 policy items; one for bob, and the other for alice with RWX
permissions with "Delegate Admin".
# Log in as bob, and edited the policy item for bob: removed Write permission.
# After saving the policy bob is not able to see to policy anymore. It only
becomes visible after the Write permission was restored.
> User with delegated admin permission on a resource cannot fetch policy for
> the resource
> ---------------------------------------------------------------------------------------
>
> Key: RANGER-3462
> URL: https://issues.apache.org/jira/browse/RANGER-3462
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Abhay Kulkarni
> Assignee: Abhay Kulkarni
> Priority: Major
>
> Steps to reproduce the issue:
> # Create users in Ranger alice, bob, and charlie. Alice has admin role, bob
> and charlie has user role.
> # Create an HDFS policy with name "test-delegate-admin" as alice. In that
> policy there 2 policy items; one for bob, and the other for alice with RWX
> permissions with "Delegate Admin".
> # Log in as bob, and edited the policy item for bob: removed Write
> permission.
> # After saving the policy bob is not able to see to policy anymore. It only
> becomes visible after the Write permission is restored.
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
