-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/75320/
-----------------------------------------------------------

(Updated Jan. 14, 2025, 9:36 a.m.)


Review request for ranger, Dineshkumar Yadav, Kishor Gollapalliwar, Abhay 
Kulkarni, Madhan Neethiraj, Mehul Parikh, Pradeep Agrawal, Ramesh Mani, sanket 
shelar, Sailaja Polavarapu, and Velmurugan Periasamy.


Changes
-------

Resolve Merge Conflict.


Bugs: RANGER-5074
    https://issues.apache.org/jira/browse/RANGER-5074


Repository: ranger


Description
-------

The Keyadmin user is able to retrieve admin user logs through the following 
REST APIs:

/service/xaudit/trx_log
/service/xaudit/trx_log/{id}
/service/assets/report
/service/assets/report/{transactionId}


Diffs (updated)
-----

  
security-admin/src/main/java/org/apache/ranger/service/RangerServiceServiceBase.java
 98857638e 
  
security-admin/src/main/java/org/apache/ranger/service/RangerTrxLogV2Service.java
 46c59ef45 


Diff: https://reviews.apache.org/r/75320/diff/2/

Changes: https://reviews.apache.org/r/75320/diff/1-2/


Testing
-------

Tested and verified that the Keyadmin user is unable to retrieve Admin user 
logs when attempting to access the following REST APIs:

/service/xaudit/trx_log
/service/xaudit/trx_log/{id}
/service/assets/report
/service/assets/report/{transactionId}


Thanks,

Rakesh Gupta

Reply via email to