[ https://issues.apache.org/jira/browse/RANGER-4980?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17896594#comment-17896594 ]
Mahesh Bandal edited comment on RANGER-4980 at 11/8/24 9:00 PM: ---------------------------------------------------------------- commit id: master branch : [bec8af3dae1857fb3069043c4e299a17c995702e|https://github.com/apache/ranger/commit/bec8af3dae1857fb3069043c4e299a17c995702e] ranger-2.6 branch : [df1b4f184176633f8ee0069760769151739d652b|https://github.com/apache/ranger/commit/df1b4f184176633f8ee0069760769151739d652b] was (Author: maheshbandal): commit id: master branch : [bec8af3dae1857fb3069043c4e299a17c995702e|https://github.com/apache/ranger/commit/bec8af3dae1857fb3069043c4e299a17c995702e] > Delete permissions on directory is denied which has hierarchy of > files/directory rooted at the argument passed to the HDFS command > ---------------------------------------------------------------------------------------------------------------------------------- > > Key: RANGER-4980 > URL: https://issues.apache.org/jira/browse/RANGER-4980 > Project: Ranger > Issue Type: Bug > Components: Ranger > Affects Versions: 3.0.0, 2.5.0 > Reporter: Mahesh Bandal > Assignee: Mahesh Bandal > Priority: Major > Fix For: 3.0.0 > > > when chained plugin is enabled and all access is provided to a directory > which has multiple files and directories under it and if a user tries to > delete a that directory then access is denied. > Steps to repro: > * create a policy which will grant all access to systest user on a directory. > * Try performing write access. It should allow. > * hdfs dfs -mkdir /user/data/part_default1/state=98/dir1 > * Now, remove default ACL's on hdfs path > * hdfs dfs -chmod -R +000 /user/data/part_default1/ > * Now, try delete operation. Access will be denied. > * hdfs dfs -rm -r -skipTrash /user/data/part_default1/state=98 -- This message was sent by Atlassian Jira (v8.20.10#820010)