Abhishek created RANGER-4798:
--------------------------------

             Summary: Default policies created for cm_trino for policies 
without select access type cannot be edited without adding permission for 
rangerlookup user
                 Key: RANGER-4798
                 URL: https://issues.apache.org/jira/browse/RANGER-4798
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
            Reporter: Abhishek
            Assignee: Pradeep Agrawal


In few of the default policies created for cm_trino, the policies do not 
contain the select access type (based on the resource in the policies).
But during default policy creation, the rangerlookup user is being added to 
each policy with "select" access type, and for policies without select access 
type, the access type in the policy item is empty.
If a user tries to edit the policy and save, then the policy save will not be 
successful as the user is prompted to add an access type for the rangerlookup 
user.
Ideally, for policies where select access type is not supported, rangerlookup 
user should be either removed from the default policies, or a proper access 
type has to be configured for the user.

Steps to reproduce :-
Try to edit the "all-function" policy in cm_trino repo and try saving the 
policy without any change, the save will fail.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to