----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/74659/#review225846 -----------------------------------------------------------
Ship it! Ship It! - Madhan Neethiraj On Oct. 10, 2023, 6:05 p.m., Subhrat Chaudhary wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/74659/ > ----------------------------------------------------------- > > (Updated Oct. 10, 2023, 6:05 p.m.) > > > Review request for ranger and Madhan Neethiraj. > > > Bugs: https://issues.apache.org/jira/browse/RANGER-4469 > > https://issues.apache.org/jira/browse/https://issues.apache.org/jira/browse/RANGER-4469 > > > Repository: ranger > > > Description > ------- > > When a dataset is created for a user with VIEW permission, and GET > datasetSummary API is called, 403 is thrown, since a user is allowed to get > dataset policies, only if the user has AUDIT or higher permissions. > > > Diffs > ----- > > security-admin/src/main/java/org/apache/ranger/biz/GdsDBStore.java > 9901ed79b > > > Diff: https://reviews.apache.org/r/74659/diff/1/ > > > Testing > ------- > > Validated by creating: > > Created dataset as below: > { > "id": 7, > "guid": "8469cfcb-dc45-4481-a754-f4abe6c298ef", > "isEnabled": true, > "createdBy": "Admin", > "updatedBy": "Admin", > "createTime": 1696947157966, > "updateTime": 1696947157967, > "version": 1, > "description": "This is GDS description", > "options": {}, > "additionalInfo": {}, > "name": "DS7", > "acl": { "users": { "joe": "VIEW", "admin": "ADMIN" } }, > "termsOfUse": "Gds Terms of Use" > } > > Called the dataset summary API for user joe. Data received as expected. > > > Thanks, > > Subhrat Chaudhary > >
