-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/74659/
-----------------------------------------------------------

Review request for ranger and Madhan Neethiraj.


Bugs: https://issues.apache.org/jira/browse/RANGER-4469
    
https://issues.apache.org/jira/browse/https://issues.apache.org/jira/browse/RANGER-4469


Repository: ranger


Description
-------

When a dataset is created for a user with VIEW permission, and GET 
datasetSummary API is called, 403 is thrown, since a user is allowed to get 
dataset policies, only if the user has AUDIT or higher permissions.


Diffs
-----

  security-admin/src/main/java/org/apache/ranger/biz/GdsDBStore.java 9901ed79b 


Diff: https://reviews.apache.org/r/74659/diff/1/


Testing
-------

Validated by creating:

Created dataset as below:
{
    "id": 7,
    "guid": "8469cfcb-dc45-4481-a754-f4abe6c298ef",
    "isEnabled": true,
    "createdBy": "Admin",
    "updatedBy": "Admin",
    "createTime": 1696947157966,
    "updateTime": 1696947157967,
    "version": 1,
    "description": "This is GDS description",
    "options": {},
    "additionalInfo": {},
    "name": "DS7",
    "acl": { "users": { "joe": "VIEW", "admin": "ADMIN" } },
    "termsOfUse": "Gds Terms of Use"
}

Called the dataset summary API for user joe. Data received as expected.


Thanks,

Subhrat Chaudhary

Reply via email to