[jira] [Created] (RANGER-3952) "plugins/policies/download/cm_hive" and "xusers/download/{serviceName}" APIs not accessible

["Abhishek (Jira)" <ji...@apache.org>]

Abhishek created RANGER-3952:
--------------------------------

             Summary: "plugins/policies/download/cm_hive" and "xusers/download/{serviceName}" APIs not accessible
                 Key: RANGER-3952
                 URL: https://issues.apache.org/jira/browse/RANGER-3952
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
            Reporter: Abhishek


The API "\{BASE_URL}/plugins/policies/download/cm_hive" is not accessible.
API reference :- [https://ranger.apache.org/apidocs/resource_ServiceREST.html#resource_ServiceREST_getServicePoliciesIfUpdated_GET]

The API request fails for both kerberos auth and for basic auth.
The user has admin permissions and the user is a part of "policy.download.auth.users"
in the hive repo. But still the request fails for the user when trying to download policies for hive service repo

But the user can access the API "\{BASE_URL}/plugins/secure/policies/download/\{hive_service_repo}".

Even the API "\{BASE_URL}/service/xusers/download/\{serviceName}" is not accessible
This API is not listed in the Ranger REST API list as well, but it is present in the code base.

If these two APIs are no longer supported, then the documentation has to be updated,
else they should be made accessible



--
This message was sent by Atlassian Jira
(v8.20.10#820010)