[
https://issues.apache.org/jira/browse/RANGER-3861?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Abhay Kulkarni updated RANGER-3861:
-----------------------------------
Summary: Allow service creator user to create users/groups/roles in default
policies (was: Allow service creator user to create default policies users)
> Allow service creator user to create users/groups/roles in default policies
> ---------------------------------------------------------------------------
>
> Key: RANGER-3861
> URL: https://issues.apache.org/jira/browse/RANGER-3861
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Abhay Kulkarni
> Assignee: Abhay Kulkarni
> Priority: Major
>
> Ranger allows non-admin users to create Ranger services. As a part of service
> creation, usually there are default policies created as well. If such
> policies contain users/groups/roles that do not yet exist in Ranger, then the
> the default policies cannot be created - only admin users can create new
> users/groups/roles - and service creation fails. This clearly is not a
> desired behavior.
> A non-admin service creator should be allowed to create service default
> policy and users/groups/roles in that policy.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
