[ 
https://issues.apache.org/jira/browse/RANGER-4823?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Madhan Neethiraj updated RANGER-4823:
-------------------------------------
    Fix Version/s: 2.5.0

> Incorrect processing of downloaded policies in plugin when policy-deltas are 
> enabled
> ------------------------------------------------------------------------------------
>
>                 Key: RANGER-4823
>                 URL: https://issues.apache.org/jira/browse/RANGER-4823
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>            Reporter: Abhay Kulkarni
>            Assignee: Abhay Kulkarni
>            Priority: Major
>             Fix For: 3.0.0, 2.5.0
>
>
> When policy deltas are enabled, and there is no material change in policy-set 
> after previous policy download processed by Ranger admin, the ServicePolicies 
> object downloaded contains null value instead of an empty list for 
> policyDeltas attribute because of change made to the annotations by 
> RANGER-3948. As the plugin considers empty-list value differently than null 
> value, the policy-engine built by the plugin does not correctly reflect the 
> existing policy-set, and leads to incorrect authorization result.
>  
> A material change to policy-set indicates that there is at least one policy 
> added/deleted/updated to previous policy-set.
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to