Vipin Rathor created RANGER-1176:

             Summary: Ranger admin does not allow to create / update a policy 
with only delegate admin permission
                 Key: RANGER-1176
             Project: Ranger
          Issue Type: Bug
          Components: admin
    Affects Versions: 0.5.0
            Reporter: Vipin Rathor
            Priority: Minor

As of RANGER-436, a policy with empty access list is valid if delegated admin 
is true. But the Ranger Admin UI doesn't allow user to create / update a policy 
with only the 'delegate admin' permission for a user / group.

Expected Result:
Create / update policy with only 'delegate admin' permission should be allowed 
via Ranger Admin UI 

Actual Result:
Upon saving, the create page throws this error for user:
"Please add permission(s) for the selected User, else User will not be added."
And similar error for group:
"Please add permission(s) for the selected Group, else Group will not be added."

As of now, the workaround is to create / update the policy via REST API. But 
the only caveat is user will not be able to edit the policy again via Admin UI.

This message was sent by Atlassian JIRA

Reply via email to