Fabian Morgan created RANGER-5667:
-------------------------------------

             Summary: Follow-on for RANGER-5628
                 Key: RANGER-5667
                 URL: https://issues.apache.org/jira/browse/RANGER-5667
             Project: Ranger
          Issue Type: Improvement
          Components: admin, plugins
            Reporter: Fabian Morgan


A couple PR review comments came in after the PR associated with RANGER-5628 
was already merged.  Essentially, if a Policy Condition has an 
*"action-matches"* condition, but the request does not supply an *s3Action* in 
the *RequestContext*, the request must be denied, and this is not being done 
currently.  This ticket will address this issue.  

Furthermore, a second comment related to unnecessary object allocation and this 
ticket also addresses that one.  

Finally, separately, it was identified that a non-empty list of actions, if 
they are all just whitespace, needs to be treated as if there were no action 
restrictions.  This ticket addresses that as well.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to