[
https://issues.apache.org/jira/browse/RANGER-3952?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17887536#comment-17887536
]
Dineshkumar Yadav commented on RANGER-3952:
-------------------------------------------
Hi [~abhishek.patil], This is as per design, we should use secure API only.
Thanks
> "plugins/policies/download/cm_hive" and "xusers/download/{serviceName}" APIs
> not accessible
> -------------------------------------------------------------------------------------------
>
> Key: RANGER-3952
> URL: https://issues.apache.org/jira/browse/RANGER-3952
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Abhishek
> Assignee: Dineshkumar Yadav
> Priority: Major
>
> The API "\{BASE_URL}/plugins/policies/download/cm_hive" is not accessible.
> API reference :-
> [https://ranger.apache.org/apidocs/resource_ServiceREST.html#resource_ServiceREST_getServicePoliciesIfUpdated_GET]
> The API request fails for both kerberos auth and for basic auth.
> The user has admin permissions and the user is a part of
> "policy.download.auth.users"
> in the hive repo. But still the request fails for the user when trying to
> download policies for hive service repo
> But the user can access the API
> "\{BASE_URL}/plugins/secure/policies/download/\{hive_service_repo}".
> Even the API "\{BASE_URL}/service/xusers/download/\{serviceName}" is not
> accessible
> This API is not listed in the Ranger REST API list as well, but it is present
> in the code base.
> If these two APIs are no longer supported, then the documentation has to be
> updated,
> else they should be made accessible
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
