[
https://issues.apache.org/jira/browse/RANGER-5624?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18085170#comment-18085170
]
Krishna Chaitanya Muttevi commented on RANGER-5624:
---------------------------------------------------
The issue was solved by above steps with keeping the masking and following step
1, 2. In the {{{}VXGroup getXGroupByGroupName{}}}() at {{XUserRest.java}}
!https://media-cdn.atlassian.com/file/858ba406-2e88-4db1-901a-4973d92bfba5/image/cdn?allowAnimated=true&client=b47d7f8e-a692-4580-bc50-5af50f9cf45a&collection=&height=125&max-age=2592000&mode=full-fit&source=mediaCard&token=eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJiNDdkN2Y4ZS1hNjkyLTQ1ODAtYmM1MC01YWY1MGY5Y2Y0NWEiLCJhY2Nlc3MiOnsidXJuOmZpbGVzdG9yZTpmaWxlOjg1OGJhNDA2LTJlODgtNGRiMS05MDFhLTQ5NzNkOTJiZmJhNSI6WyJyZWFkIl0sInVybjpmaWxlc3RvcmU6ZmlsZTo2YjE5NmIwMi0yODJhLTRlNjEtOTEyZS02YzY1NzQ4OWRmM2EiOlsicmVhZCJdfSwiZXhwIjoxNzgwMzA1MzIxLCJuYmYiOjE3ODAzMDQ0MjEsImFhSWQiOiI3MTIwMjA6ZGU1ZTQxNTItZmJlNi00ZGVjLWJiOGMtZTY4ZmZjMjMyMGUxIiwiaHR0cHM6Ly9pZC5hdGxhc3NpYW4uY29tL2FwcEFjY3JlZGl0ZWQiOmZhbHNlfQ.vlhy8qHiTUbk_UfNUEqn8Aygo-P4zgspfQ_Duj0AbXY&width=616#media-blob-url=true&id=858ba406-2e88-4db1-901a-4973d92bfba5&clientId=b47d7f8e-a692-4580-bc50-5af50f9cf45a&contextId=&collection=!
> Inconsistent masking of updatedBy field in
> /xusers/groups/groupName/{group_name} API compared to /xusers/groups/{id}
> --------------------------------------------------------------------------------------------------------------------
>
> Key: RANGER-5624
> URL: https://issues.apache.org/jira/browse/RANGER-5624
> Project: Ranger
> Issue Type: Improvement
> Components: admin
> Affects Versions: 3.0.0
> Reporter: Krishna Chaitanya Muttevi
> Priority: Major
> Attachments: image-2026-06-01-14-52-31-185.png
>
>
> There is an inconsistency in the masking behavior of the {{updatedBy}} field
> in the {{VXGroup}} response across group retrieval APIs. When a group is
> fetched using {{{}/xusers/groups/\{id}{{}}}}, the {{updatedBy}} field is
> masked as expected. However, when the same group is retrieved using
> {{{}/xusers/groups/groupName/\{group_name}{{}}}}, the {{updatedBy}} field is
> returned with its actual value instead of being masked.
> For example, calling {{GET /service/xusers/groups/groupName/public}} returns
> {{{}"updatedBy": "Admin"{}}}, whereas {{{}GET /service/xusers/groups/{id{}}}}
> returns a masked value (e.g., {{{}"******"{}}}). This results in inconsistent
> API behavior and leads to unintended exposure of user-related metadata
> through one endpoint while it remains masked in another.
> In below image the underlined red lines would show the true issue and
> mismatch in masking field of vXGroup.
> !image-2026-06-01-14-52-31-185.png|width=915,height=591!
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
