[
https://issues.apache.org/jira/browse/RANGER-4764?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Anand Nadar updated RANGER-4764:
--------------------------------
Description:
Suppose there exists a Dataset with name "Sales 2021". And it has a policy
giving access to some user. Then the policy which is being created will have
its name as
{code:java}
"DATASET: " + dataset.getName() + "@" + System.currentTimeMillis() {code}
So the dataset name will be "DATASET: Sales 2021@1699530693847".
This policy name will be seen in the access audits when enforcement is done
using this policy.
But now when the Dataset name is modified to "Sales US 2021", the policy name
remains "DATASET: Sales 2021@1699530693847" and whenever policy enforcement is
done, it will still show the policy name with old dataset name.
Solution:
To resolve this, we need to update all the policies associated with the dataset
when the dataset name is being modified.
Similarly this needs to be done for project policy as well. When the project
name is modified, all policies associated with that project should be updated
with the new project name.
was:
Suppose there exists a Dataset with name "Sales 2021". And it has a policy
giving access to some user. Then the policy which is being created will have
its name as
{code:java}
"DATASET: " + dataset.getName() + "@" + System.currentTimeMillis() {code}
So the dataset name will be "DATASET: Sales 2021@1699530693847".
This policy name will be seen in the access audits when enforcement is done
using this policy.
But now when the Dataset name is modified to "Sales US 2021", the policy name
remains "DATASET: Sales 2021@1699530693847" and whenever policy enforcement is
done, it will still show the policy name with old dataset name.
Solution:
To resolve this, we need to update all the policies associated with the dataset
when the dataset name is being modified.
> GDS: When a dataset name is being modified, then the policy name of all the
> policies which is associated with dataset should also be updated.
> ----------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: RANGER-4764
> URL: https://issues.apache.org/jira/browse/RANGER-4764
> Project: Ranger
> Issue Type: Task
> Components: admin
> Reporter: Anand Nadar
> Assignee: Anand Nadar
> Priority: Major
>
> Suppose there exists a Dataset with name "Sales 2021". And it has a policy
> giving access to some user. Then the policy which is being created will have
> its name as
> {code:java}
> "DATASET: " + dataset.getName() + "@" + System.currentTimeMillis() {code}
> So the dataset name will be "DATASET: Sales 2021@1699530693847".
> This policy name will be seen in the access audits when enforcement is done
> using this policy.
> But now when the Dataset name is modified to "Sales US 2021", the policy name
> remains "DATASET: Sales 2021@1699530693847" and whenever policy enforcement
> is done, it will still show the policy name with old dataset name.
> Solution:
> To resolve this, we need to update all the policies associated with the
> dataset when the dataset name is being modified.
> Similarly this needs to be done for project policy as well. When the project
> name is modified, all policies associated with that project should be updated
> with the new project name.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
