[ https://issues.apache.org/jira/browse/RANGER-3995?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Pradeep Agrawal reassigned RANGER-3995: --------------------------------------- Assignee: (was: Abhay Kulkarni) > Policy update request fails if isDenyAllElse flag is set true in request json > when using "/policy/apply" API > ------------------------------------------------------------------------------------------------------------ > > Key: RANGER-3995 > URL: https://issues.apache.org/jira/browse/RANGER-3995 > Project: Ranger > Issue Type: Bug > Components: Ranger > Affects Versions: 3.0.0, 2.3.0 > Reporter: Pradeep Agrawal > Priority: Major > Fix For: 3.0.0, 2.3.0 > > > An issue was found with respect to "/policy/apply" API when the policy json > contains denyAllElse flag set true. > When a request is made to "/service/public/v2/api/policy/apply" using a > policy json where denyAllElse flag is set to true, > the policy is created successfully the first time. > But if a request is made again using the same policy json, it gives the > following error. > {code:java} > { > "statusCode": 1, > "msgDesc": "(0) Validation failure: error code[3049], reason[Deny or > deny-exceptions are not supported if policy has isDenyAllElse flag set to > true], field[policy items], subfield[null], type[] " > } {code} > Steps to reproduce :- > 1. Make a POST request to the below mentioned API endpoint, using a policy > json where isDenyAllElse flag is set true > /service/public/v2/api/policy/apply > 2. Fetch the policy using the newly created policy id, and try to make a POST > request to "/policy/apply" using the policy json obtained from the GET > request. The request results in an error -- This message was sent by Atlassian Jira (v8.20.10#820010)