maheshbandal15 opened a new pull request, #1234: URL: https://github.com/apache/ranger/pull/1234
## What changes were proposed in this pull request? **Fix 1 - Deny wins at equal priority** Replaced the _any-specific evaluation logic that used getPolicyPriority() >= oldPriority with a simpler rule: only a strictly higher-priority policy can override an existing deny. **Fix 2 - Break only when allow is actually stored** The _any loop now breaks only if the allow was written into accessTypeResults **Test changes** New test resource: agents-common/src/test/resources/policyengine/test_policyengine_hive_any_access_priority.json Four Hive scenarios with deny/allow policy pairs at different priorities _any requests for USE caseN_db by user hrt15 New test method: testPolicyEngine_hive_any_access_priority() in TestPolicyEngine.java ## How was this patch tested? mvn clean install manual tests -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
