Subhrat Chaudhary created RANGER-4469:
-----------------------------------------
Summary: Dataset summary API throws 403
Key: RANGER-4469
URL: https://issues.apache.org/jira/browse/RANGER-4469
Project: Ranger
Issue Type: Sub-task
Components: admin
Reporter: Subhrat Chaudhary
Assignee: Subhrat Chaudhary
When a dataset is created for a user with VIEW permission, and GET
datasetSummary API is called, 403 is thrown, since a user is allowed to get
dataset policies, only if the user has AUDIT or higher permissions. Steps to
reproduce:
# Created a dataset as below:
{
"id": 7,
"guid": "8469cfcb-dc45-4481-a754-f4abe6c298ef",
"isEnabled": true,
"createdBy": "Admin",
"updatedBy": "Admin",
"createTime": 1696947157966,
"updateTime": 1696947157967,
"version": 1,
"description": "This is GDS description",
"options": {},
"additionalInfo": {},
"name": "DS7",
"acl": {
"users": {
"joe": "VIEW",
"admin": "ADMIN"
}
},
"termsOfUse": "Gds Terms of Use"
}
2. When the GET datasetSummary API is called
[http://localhost:6080/service/gds/dataset/summary], 403 is thrown.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
