Krzysztof Adamski created RANGER-1346:
-----------------------------------------
Summary: Policies are matched against wildcard path for location
Key: RANGER-1346
URL: https://issues.apache.org/jira/browse/RANGER-1346
Project: Ranger
Issue Type: Bug
Components: Ranger
Affects Versions: 0.6.0
Reporter: Krzysztof Adamski
Attachments: Ranger1.png, Ranger2.png, Ranger3.png
A policy in Ranger is being picked up based on the destination path. All the
destination paths that match the substring are being picked up. This is
undesired and it breaks the security concept.
e.g. for the path
/test1234
a policy for path
/test
will be used.
See details in attachments.
No additional permission on hdfs to exclude fallback.
Tested on Ranger 0.6.0.2.5 HDP 2.5.
hdfs dfs –ls / | grep test
d--------- - hdfs hdfs 0 2017-02-02 14:17 /test
d--------- - hdfs hdfs 0 2017-02-02 14:18 /test1234
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
