Pradeep Agrawal created RANGER-3995: ---------------------------------------
Summary: Policy update request fails if isDenyAllElse flag is set true in request json when using "/policy/apply" API Key: RANGER-3995 URL: https://issues.apache.org/jira/browse/RANGER-3995 Project: Ranger Issue Type: Bug Components: Ranger Affects Versions: 2.3.0, 3.0.0 Reporter: Pradeep Agrawal Assignee: Abhay Kulkarni Fix For: 3.0.0, 2.3.0 An issue was found with respect to "/policy/apply" API when the policy json contains denyAllElse flag set true. When a request is made to "/service/public/v2/api/policy/apply" using a policy json where denyAllElse flag is set to true, the policy is created successfully the first time. But if a request is made again using the same policy json, it gives the following error. {code:java} { "statusCode": 1, "msgDesc": "(0) Validation failure: error code[3049], reason[Deny or deny-exceptions are not supported if policy has isDenyAllElse flag set to true], field[policy items], subfield[null], type[] " } {code} Steps to reproduce :- 1. Make a POST request to the below mentioned API endpoint, using a policy json where isDenyAllElse flag is set true /service/public/v2/api/policy/apply 2. Fetch the policy using the newly created policy id, and try to make a POST request to "/policy/apply" using the policy json obtained from the GET request. The request results in an error -- This message was sent by Atlassian Jira (v8.20.10#820010)