[
https://issues.apache.org/jira/browse/RANGER-5428?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18047832#comment-18047832
]
Madhan Neethiraj commented on RANGER-5428:
------------------------------------------
[~bhaveshamre] - when a security-zone is deleted, all policies and data-shares
associated with it are deleted. This is by design.
Similarly, when a service is deleted:
# all policies of the service should be deleted
# security-zones that refer to the service should be updated to remove
reference to the serivce
# all data-shares associated with the service should be deleted
> [GDS] Datashare is getting deleted when security zone is deleted assigned in
> datashare
> --------------------------------------------------------------------------------------
>
> Key: RANGER-5428
> URL: https://issues.apache.org/jira/browse/RANGER-5428
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Bhavesh Amre
> Assignee: Bhavesh Amre
> Priority: Major
>
> *Current Behavior*
> When a security zone is deleted in Apache Ranger, all associated datashares
> are automatically deleted through the `deleteAllGdsObjectsForSecurityZone()`
> method. This cascading deletion occurs even when the datashare is actively
> assigned to one or more datasets and some other scenarios.
> *Steps To Reproduce*
> 1. Create a security zone with resources:
> - Database: `vehicle`
> - Table: `cars`
> - Column: `*`
> 2. Create a datashare with resources and default 'select' privilege:
> - Database: `vehicle`
> - Table: `cars`
> - Column: `*`
> - Assign to the security zone created in step 1
> 3. Create a dataset with policy for user 'hrt_1' having '_READ' permission
> 4. Add the datashare to the dataset and activate it (status: ACTIVE)
> 5. Delete the security zone
> {*}Result{*}: The datashare is deleted along with the security zone
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
