Pradeep Agrawal created RANGER-3995:
---------------------------------------
Summary: Policy update request fails if isDenyAllElse flag is set
true in request json when using "/policy/apply" API
Key: RANGER-3995
URL: https://issues.apache.org/jira/browse/RANGER-3995
Project: Ranger
Issue Type: Bug
Components: Ranger
Affects Versions: 2.3.0, 3.0.0
Reporter: Pradeep Agrawal
Assignee: Abhay Kulkarni
Fix For: 3.0.0, 2.3.0
An issue was found with respect to "/policy/apply" API when the policy json
contains denyAllElse flag set true.
When a request is made to "/service/public/v2/api/policy/apply" using a policy
json where denyAllElse flag is set to true,
the policy is created successfully the first time.
But if a request is made again using the same policy json, it gives the
following error.
{code:java}
{
"statusCode": 1,
"msgDesc": "(0) Validation failure: error code[3049], reason[Deny or
deny-exceptions are not supported if policy has isDenyAllElse flag set to
true], field[policy items], subfield[null], type[] "
} {code}
Steps to reproduce :-
1. Make a POST request to the below mentioned API endpoint, using a policy json
where isDenyAllElse flag is set true
/service/public/v2/api/policy/apply
2. Fetch the policy using the newly created policy id, and try to make a POST
request to "/policy/apply" using the policy json obtained from the GET request.
The request results in an error
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
