[
https://issues.apache.org/jira/browse/RANGER-3082?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ramesh Mani updated RANGER-3082:
--------------------------------
Fix Version/s: 3.0.0
2.2.0
> User with delegated-admin is unable to create policy
> ----------------------------------------------------
>
> Key: RANGER-3082
> URL: https://issues.apache.org/jira/browse/RANGER-3082
> Project: Ranger
> Issue Type: Bug
> Components: plugins
> Reporter: Madhan Neethiraj
> Assignee: Abhay Kulkarni
> Priority: Major
> Fix For: 3.0.0, 2.2.0
>
>
> Ranger policy model supports delegated-admin model which enables an
> administrator to allow non-admin users to setup policies for a subset of
> resources. For example, following policy would allow users in finance_admin
> group to setup policies for all tables and columns in database=finance.
> {noformat}
> resource: database=finance; table=*; column=*
> group: finance_admin
> delegated-admin: true
> {noformat}
> However, when macros like {{\{USER\}}} are used in resource names, users with
> delegated-admin are unable to setup policies. For example, following policy
> should allow user {{scott}} to setup policies for tables in a database named
> {{test_scott}}, but it doesn't.
> {noformat}
> resource: database=test_{USER}; table=*; column=*
> user: {USER}
> delegated-admin: true
> {noformat}
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
