[ 
https://issues.apache.org/jira/browse/RANGER-4549?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17790527#comment-17790527
 ] 

Pradeep Agrawal commented on RANGER-4549:
-----------------------------------------

Review request link : https://reviews.apache.org/r/74763/

> Non admin users cannot access /public/v2/api/roles/names and  
> /public/v2/api/roles/name/{name} API, but can access /public/v2/api/roles API
> -------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: RANGER-4549
>                 URL: https://issues.apache.org/jira/browse/RANGER-4549
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>            Reporter: Abhishek
>            Assignee: Pradeep Agrawal
>            Priority: Major
>             Fix For: 3.0.0
>
>         Attachments: 
> 0005-RANGER-4549-Non-admin-users-cannot-access-public-v2-.patch
>
>
> Non admin users cannot access /public/v2/api/roles/names API, but can access 
> the /public/v2/api/roles API and fetch the details of all the roles.
> Since the users can fetch the details from the roles API itself, the 
> restriction for non admin users to access /roles/names and 
> /roles/name/\{name} API.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to