[ 
https://issues.apache.org/jira/browse/RANGER-5735?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Vyom Mani Tiwari resolved RANGER-5735.
--------------------------------------
    Fix Version/s: 3.0.0
                   2.10
       Resolution: Fixed

> Improve authorization consistency across RoleREST endpoints
> -----------------------------------------------------------
>
>                 Key: RANGER-5735
>                 URL: https://issues.apache.org/jira/browse/RANGER-5735
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 2.8.0, 2.9.0
>            Reporter: Vyom Mani Tiwari
>            Assignee: Vyom Mani Tiwari
>            Priority: Critical
>             Fix For: 3.0.0, 2.10
>
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> Some operations in {{RoleREST}} do not consistently apply the same 
> access-control pattern already used by comparable endpoints in the same 
> class. This change aligns role-read and grant/revoke operations with the 
> existing admin / admin-option authorization checks used elsewhere in 
> {{{}RoleREST{}}}, so behavior is consistent across all role-related APIs.
> No functional or API contract changes are intended for callers that already 
> hold appropriate permissions.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to