[ 
https://issues.apache.org/jira/browse/RANGER-4966?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Abhishek Kumar updated RANGER-4966:
-----------------------------------
    Fix Version/s: 2.6.0

> Remove self node from the resourceTrie only if it has no children, no 
> evaluators and no wildcard-evaluators
> -----------------------------------------------------------------------------------------------------------
>
>                 Key: RANGER-4966
>                 URL: https://issues.apache.org/jira/browse/RANGER-4966
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>            Reporter: Abhay Kulkarni
>            Assignee: Abhay Kulkarni
>            Priority: Major
>             Fix For: 2.6.0
>
>
> If the policy-deltas are enabled, then when two policies have a common subset 
> of resources and are defined on same user (or subset of users, through groups 
> or direct users), if one of these policies is modified (on anything: name, 
> resource, user), it is the only one in effect during access evaluation. Until 
> a restart of the underlying service. 
> The underlying cause is a ResourceTrie node referring to modified 
> policy-evaluator is removed even when it contains wildcard-evaluator(s).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to