[ https://issues.apache.org/jira/browse/RANGER-2933?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Abhishek Shukla resolved RANGER-2933. ------------------------------------- Resolution: Not A Bug > [Ranger Ozone Plugin] $USER Placeholder is not honoured in KEY resource > path, Policy User Items > ------------------------------------------------------------------------------------------------ > > Key: RANGER-2933 > URL: https://issues.apache.org/jira/browse/RANGER-2933 > Project: Ranger > Issue Type: Bug > Components: plugins > Affects Versions: 2.1.0 > Reporter: Abhishek Shukla > Priority: Major > Labels: ranger > Attachments: $USER_Policy.png, User_Policy_Audit.png > > > Observed that $USER placeholder is not enforced while using it in either in > KEY value or User's value in Policy Item. > > Test Policy: > {noformat} > 1. Resources: > volume - test-volume > bucket - test-bucket > key - user/$USER, user/$USER/* > 2. Policy Item: > User: $USER > Permissions: All{noformat} > > *Expected Result:* > Any user should be able to create user home directory > *Actual Result:* > The user is denied permission to create key. > {noformat} > [root@quasar-tyedwn-1 keytabs]# ozone fs -mkdir -p > o3fs://test-bucket.test-volume.ozone1/user/hrt_1 > mkdir: User hr...@ad.halxg.cloudera.com doesn't have CREATE permission to > access key > {noformat} > -- This message was sent by Atlassian Jira (v8.3.4#803005)