[
https://issues.apache.org/jira/browse/RANGER-5756?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Pradeep Agrawal updated RANGER-5756:
------------------------------------
Description:
*Problem*
During upgrade, PatchForExternalUserStatusUpdate_J10056 reactivates every
portal user with user_src=USER_EXTERNAL and status=ACT_STATUS_DISABLED.
Disabled is a supported user state in Ranger Admin (modifyUserActiveStatus).
The patch does not have enough information to decide which disabled external
accounts should be changed during upgrade.
*Proposed change*
Update J10056 so it no longer bulk-updates user status. For matching rows, log
the count and affected login IDs and leave records unchanged. Operators can
re-enable specific accounts through Ranger Admin when needed.
*Scope*
- PatchForExternalUserStatusUpdate_J10056.java
- TestPatchForExternalUserStatusUpdate_J10056.java
*Testing*
- Unit tests updated to verify disabled external users are not modified
> Make J10056 skip automatic reactivation of disabled external users
> ------------------------------------------------------------------
>
> Key: RANGER-5756
> URL: https://issues.apache.org/jira/browse/RANGER-5756
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Affects Versions: 2.9.0
> Reporter: Pradeep Agrawal
> Assignee: Pradeep Agrawal
> Priority: Major
> Fix For: 2.10
>
>
> *Problem*
> During upgrade, PatchForExternalUserStatusUpdate_J10056 reactivates every
> portal user with user_src=USER_EXTERNAL and status=ACT_STATUS_DISABLED.
>
> Disabled is a supported user state in Ranger Admin (modifyUserActiveStatus).
> The patch does not have enough information to decide which disabled external
> accounts should be changed during upgrade.
>
> *Proposed change*
> Update J10056 so it no longer bulk-updates user status. For matching rows,
> log the count and affected login IDs and leave records unchanged. Operators
> can re-enable specific accounts through Ranger Admin when needed.
>
> *Scope*
> - PatchForExternalUserStatusUpdate_J10056.java
> - TestPatchForExternalUserStatusUpdate_J10056.java
>
> *Testing*
> - Unit tests updated to verify disabled external users are not modified
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
