[ 
https://issues.apache.org/jira/browse/RANGER-2881?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Dineshkumar Yadav updated RANGER-2881:
--------------------------------------
    Description: 
Ranger user having role as "user" with delegate admin permission able to create 
policy which has non-existing users/groups/roles in the specified policy.  
only admin users should be able to create policy with new users/groups/roles on 
the fly creation of users/groups/roles.

  was:Ranger user having role as "user" with deligate


> Delegate Admin user having role "user" able to create policy which has 
> non-existing users/groups
> ------------------------------------------------------------------------------------------------
>
>                 Key: RANGER-2881
>                 URL: https://issues.apache.org/jira/browse/RANGER-2881
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>            Reporter: Dineshkumar Yadav
>            Priority: Major
>
> Ranger user having role as "user" with delegate admin permission able to 
> create policy which has non-existing users/groups/roles in the specified 
> policy.  
> only admin users should be able to create policy with new users/groups/roles 
> on the fly creation of users/groups/roles.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to