Abhay Kulkarni created RANGER-4966:
--------------------------------------
Summary: Remove self node from the resourceTrie only if it has no
children, no evaluators and no wildcard-evaluators
Key: RANGER-4966
URL: https://issues.apache.org/jira/browse/RANGER-4966
Project: Ranger
Issue Type: Bug
Components: Ranger
Reporter: Abhay Kulkarni
Assignee: Abhay Kulkarni
If the policy-deltas are enabled, then when two policies have a common subset
of resources and are defined on same user (or subset of users, through groups
or direct users), if one of these policies is modified (on anything: name,
resource, user), it is the only one in effect during access evaluation. Until a
restart of the underlying service.
The underlying cause is a ResourceTrie node referring to modified
policy-evaluator is removed even when it contains wildcard-evaluator(s).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
