[ https://issues.apache.org/jira/browse/RANGER-2881?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dineshkumar Yadav updated RANGER-2881: -------------------------------------- Description: Ranger user having role as "user" with delegate admin permission able to create policy which has non-existing users/groups/roles in the specified policy. only admin users should be able to create policy with new users/groups/roles on the fly creation of users/groups/roles. was:Ranger user having role as "user" with deligate > Delegate Admin user having role "user" able to create policy which has > non-existing users/groups > ------------------------------------------------------------------------------------------------ > > Key: RANGER-2881 > URL: https://issues.apache.org/jira/browse/RANGER-2881 > Project: Ranger > Issue Type: Bug > Components: Ranger > Reporter: Dineshkumar Yadav > Priority: Major > > Ranger user having role as "user" with delegate admin permission able to > create policy which has non-existing users/groups/roles in the specified > policy. > only admin users should be able to create policy with new users/groups/roles > on the fly creation of users/groups/roles. -- This message was sent by Atlassian Jira (v8.3.4#803005)