Lingaraj Gowdar created RANGER-4860:
---------------------------------------
Summary: Ranger With ABAC - Row level filter is not working
Key: RANGER-4860
URL: https://issues.apache.org/jira/browse/RANGER-4860
Project: Ranger
Issue Type: Bug
Components: Ranger, tagsync
Reporter: Lingaraj Gowdar
With Java17 compiled code,
>From Ranger, Create this access policy to allow access to the session_data and
>session_table
!image-2024-07-16-20-10-02-017.png!
!image-2024-07-16-20-10-31-432.png!
Run select * from session_table; when row level filter is enabled and disabled
+*Expected:*+
When row level filter policy is {*}disabled{*}, the below query should work
select * from session_table;
+----------+--------+---------------+--------------+------------------------+------------------------+
| user | email | password | application | start_time |
end_time |
+----------+--------+---------------+--------------+------------------------+------------------------+
| lgowdar | NULL | LLLLLLLLLLLL | ambari | 2023-10-10 02:49:43.0 |
2023-10-10 09:14:45.0 |
| lgowdar | NULL | LLLLLLLLLLLL | ranger | 2023-10-10 02:49:43.0 |
2023-10-10 09:14:45.0 |
| lgowdar | NULL | LLLLLLLLLLLL | ambari | 2023-08-10 02:49:43.0 |
2023-08-10 09:14:45.0 |
+----------+--------+---------------+--------------+------------------------+------------------------+
It should work when row level policy is enabled.
+*Actual:*+
Query fails with NullPointerException when row level filter is enabled
Error: Error while compiling statement: FAILED: NullPointerException Cannot
invoke "javax.script.ScriptEngine.createBindings()" because "scriptEngine" is
null
Please ignore line number 1, marked in the above error message. Error at line
59. (state=,code=0)
+*Note:*+
It works when tried with NTID user in a Condition like : `user`="<NTID_USER>"
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
