Abhishek created RANGER-4798: -------------------------------- Summary: Default policies created for cm_trino for policies without select access type cannot be edited without adding permission for rangerlookup user Key: RANGER-4798 URL: https://issues.apache.org/jira/browse/RANGER-4798 Project: Ranger Issue Type: Bug Components: Ranger Reporter: Abhishek Assignee: Pradeep Agrawal
In few of the default policies created for cm_trino, the policies do not contain the select access type (based on the resource in the policies). But during default policy creation, the rangerlookup user is being added to each policy with "select" access type, and for policies without select access type, the access type in the policy item is empty. If a user tries to edit the policy and save, then the policy save will not be successful as the user is prompted to add an access type for the rangerlookup user. Ideally, for policies where select access type is not supported, rangerlookup user should be either removed from the default policies, or a proper access type has to be configured for the user. Steps to reproduce :- Try to edit the "all-function" policy in cm_trino repo and try saving the policy without any change, the save will fail. -- This message was sent by Atlassian Jira (v8.20.10#820010)