Alok Lal created RANGER-311:
-------------------------------

             Summary: Turning on new validation rules on an existing 
system/policies could cause problems.  We need a way to mitigate those possible 
problems.
                 Key: RANGER-311
                 URL: https://issues.apache.org/jira/browse/RANGER-311
             Project: Ranger
          Issue Type: Sub-task
            Reporter: Alok Lal


One use case is that adding an existing policy via grant/revoke may fail 
because that "update" runs afoul with new validation rules thereby preventing 
successful grant/revoke to function.  Another use case might be someone trying 
to bulk load (migrate) policies from, say, dev to test to production.  And such 
a bulk load might be denied either due to incomplete policies in source system 
or due to newly imposed "fk" constraints.

Possible solutions could be a combination of the following:
- Provide for sensible auto correction of "common" and/or "simple" problems.  
Some problems may not be sensibly correctable or be risky to auto-correct.
- Provide a tool that can publish a report about possible bulk load issues.  
This would be coupled with help pages on how to correct a possible problem.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to