ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Vipin Rathor (JIRA)" <j...@apache.org>
Subject [jira] [Created] (RANGER-1176) Ranger admin does not allow to create / update a policy with only delegate admin permission
Date Mon, 19 Sep 2016 20:13:20 GMT
Vipin Rathor created RANGER-1176:
------------------------------------

             Summary: Ranger admin does not allow to create / update a policy with only delegate
admin permission
                 Key: RANGER-1176
                 URL: https://issues.apache.org/jira/browse/RANGER-1176
             Project: Ranger
          Issue Type: Bug
          Components: admin
    Affects Versions: 0.5.0
            Reporter: Vipin Rathor
            Priority: Minor


As of RANGER-436, a policy with empty access list is valid if delegated admin is true. But
the Ranger Admin UI doesn't allow user to create / update a policy with only the 'delegate
admin' permission for a user / group.

Expected Result:
Create / update policy with only 'delegate admin' permission should be allowed via Ranger
Admin UI 

Actual Result:
Upon saving, the create page throws this error for user:
"Please add permission(s) for the selected User, else User will not be added."
And similar error for group:
"Please add permission(s) for the selected Group, else Group will not be added."

Workaround:
As of now, the workaround is to create / update the policy via REST API. But the only caveat
is user will not be able to edit the policy again via Admin UI.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message