Sanket Shelar created RANGER-5729:
-------------------------------------
Summary: Unable to import exported GDS policies via Service
Manager due to 403 Error
Key: RANGER-5729
URL: https://issues.apache.org/jira/browse/RANGER-5729
Project: Ranger
Issue Type: Bug
Components: Ranger
Reporter: Sanket Shelar
Assignee: Sanket Shelar
If a GDS-related policy is present on the cluster and we export policies from
the Report page, it exports *all* policies. However, when trying to import that
policy via the Service Manager page, it triggers a 403 error
h3. Steps to Reproduce
# Ensure a GDS-related policy is present on the cluster.
# Navigate to the *Report* page and export the policy.
# Navigate to the *Service Manager* page.
# Attempt to import the newly exported policy file.
{code:java}
beeline -e "create database vehicle;"
beeline -e "create table vehicle.cars(car_id int, car_name string, car_color
string, car_price int);"
beeline -e "select * from vehicle.cars;"
------------------Create datashare---------
curl -ik -u admin:rangerR0cks! -X POST -H 'Content-type:application/json'
'http://localhost:6080/service/gds/datashare' -d '{"name": "test_qyhusmk",
"service": "dev_hive", "description": "test description 1", "acl": {"users":
{"hive": "LIST"}, "groups": {}, "roles": {}}, "zone": "", "defaultAccessTypes":
["all"], "defaultTagMasks": [], "conditionExpr": null, "termsOfUse": "Test
terms and conditions"}'
-------------------create resource in the datashare---------
curl -ik -u admin:rangerR0cks! -X POST -H 'Content-type:application/json'
'http://localhost:6080/service/gds/resource' -d '{"name":
"test_resource_test_qyhusmk", "dataShareId": 1, "resource": {"column":
{"values": ["*"], "isExcludes": false, "isRecursive": false}, "table":
{"values": ["cars"], "isExcludes": false, "isRecursive": false}, "database":
{"values": ["vehicle"], "isExcludes": false, "isRecursive": false}},
"conditionExpr": null, "accessTypes": null}'
-----------------------Create dataset--------------
curl -ik -u admin:rangerR0cks! -X POST -H 'Content-type:application/json'
'http://localhost:6080/service/gds/dataset' -d '{"name": "dataset_test1",
"acl": {"users": {"admin": "ADMIN"}, "groups": {}, "roles": {}}, "description":
"dataset_qyhusmk_description", "termsOfUse": ""}'
--------------------Create dataset policy-------
curl -ik -u admin:rangerR0cks! -X POST -H 'Content-type:application/json'
'http://localhost:6080/service/gds/dataset/1/policy' -d
'{"policyItems":[{"accesses":[{"type":"_READ","isAllowed":true}],"users":["hive"],"groups":[],"roles":[]}],"policyLabels":[],"policyPriority":"0","resources":{"dataset":{"values":["dataset_test1"]}},"conditions":[]}'
----------------------Add datashare in the dataset-------
curl -ik -u admin:rangerR0cks! -X POST -H 'Content-type:application/json'
'http://localhost:6080/service/gds/datashare/dataset' -d '{"datasetId": 1,
"dataShareId": 1, "status": "ACTIVE"}'
{code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
