Abhay Kulkarni created RANGER-4823:
--------------------------------------
Summary: Incorrect processing of downloaded policies in plugin
when policy-deltas are enabled
Key: RANGER-4823
URL: https://issues.apache.org/jira/browse/RANGER-4823
Project: Ranger
Issue Type: Bug
Components: Ranger
Reporter: Abhay Kulkarni
Assignee: Abhay Kulkarni
When policy deltas are enabled, and there is no material change in policy-set
after previous policy download processed by Ranger admin, the ServicePolicies
object downloaded contains null value instead of an empty list for policyDeltas
attribute because of change made to the annotations by RANGER-3948. As the
plugin considers empty-list value differently than null value, the
policy-engine built by the plugin does not correctly reflect the existing
policy-set, and leads to incorrect authorization result.
A material change to policy-set indicates that there is at least one policy
added/deleted/updated to previous policy-set.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
