ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Alok Lal (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (RANGER-205) Delete rest api of User not deleting user completely from system
Date Tue, 06 Jan 2015 23:41:34 GMT

    [ https://issues.apache.org/jira/browse/RANGER-205?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14266982#comment-14266982

Alok Lal commented on RANGER-205:

Soft delete the user/group if they are internal(i.e. created from UI).
Give the error message if someone try to delete (using rest apis) external user/group .
Do we want to have exception for REST api, i.e. do you want to allow this via the UI?  Should
API call succeed, i.e. get back 200?  I feel it should be disallowed via API or UI.  REST
call should return 500.

Give the error message if there is some policy defined for user/group that is to be deleted.
Not sure I understand this.  Can you elaborate the use case a bit please?  Fact that a policy
exists should not prevent soft delete of an internal user.  Such a policy does no harm other
than perhaps to slow things down and lead to some clutter.  Such policies should simply get
disabled as a side effect and user soft-delete be allowed.  I would say we return 200 still.

> Delete rest api of User not deleting user completely from system
> ----------------------------------------------------------------
>                 Key: RANGER-205
>                 URL: https://issues.apache.org/jira/browse/RANGER-205
>             Project: Ranger
>          Issue Type: Bug
>    Affects Versions: 0.4.0
>            Reporter: Hanish Bansal
> Delete rest api of user is removing entry from x_user table of database and not from
x_portal_user table so user get invisible from UI and api return success status.
> Due to which if a user is updated to have username/email-id of deleted user, it will
error message that this username/email-id already exists.
> Also if a new user is created with user-name of deleted user, user get successfully created
but his/her details are mapped with deleted user.
> Rest apis used are:
> {quote}
> DELETE http://<ip>:6080/service/xusers/users/userName/<username>
> DELETE http://<ip>:6080/service/xusers/users/<id>
> {quote}
> Expected result:
> Apis should remove entry from both tables x_user and x_portal_user.

This message was sent by Atlassian JIRA

View raw message