Vipin Rathor created RANGER-1176: ------------------------------------ Summary: Ranger admin does not allow to create / update a policy with only delegate admin permission Key: RANGER-1176 URL: https://issues.apache.org/jira/browse/RANGER-1176 Project: Ranger Issue Type: Bug Components: admin Affects Versions: 0.5.0 Reporter: Vipin Rathor Priority: Minor
As of RANGER-436, a policy with empty access list is valid if delegated admin is true. But the Ranger Admin UI doesn't allow user to create / update a policy with only the 'delegate admin' permission for a user / group. Expected Result: Create / update policy with only 'delegate admin' permission should be allowed via Ranger Admin UI Actual Result: Upon saving, the create page throws this error for user: "Please add permission(s) for the selected User, else User will not be added." And similar error for group: "Please add permission(s) for the selected Group, else Group will not be added." Workaround: As of now, the workaround is to create / update the policy via REST API. But the only caveat is user will not be able to edit the policy again via Admin UI. -- This message was sent by Atlassian JIRA (v6.3.4#6332)