RakeshGuptaDev opened a new pull request, #1225: URL: https://github.com/apache/ranger/pull/1225
## What changes were proposed in this pull request? After [RANGER-4805](https://issues.apache.org/jira/browse/RANGER-4805), Atlas permissions (atlas:read, etc.) can still appear in tag policies and in x_access_type_def, especially after [RANGER-3491](https://issues.apache.org/jira/browse/RANGER-3491) changed the service-definition bootstrap flow. Cause: The enableTagBasedPolicies check was only present in updateTagServiceDefForAccessTypes(), which is no longer called from the production code. The actual sync path (postCreate / postUpdate → updateTagServiceDefForUpdatingAccessTypes()) did not have this check, allowing Atlas permissions to be synced into the tag service-definition. ## How was this patch tested? Tested upgrade with J10063 patch; verified atlas:* absent from x_access_type_def and tag policy UI. Restarted Ranger Admin and updated Atlas service-def — Atlas permissions did not reappear. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
