You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Alexander Posledov (JIRA)" <ji...@apache.org> on 2018/10/22 11:04:00 UTC

[jira] [Updated] (RANGER-2261) Using '&' in a policy name leads to unintentional name changes during further updates of policy

     [ https://issues.apache.org/jira/browse/RANGER-2261?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alexander Posledov updated RANGER-2261:
---------------------------------------
    Description: 
1) Create a policy with "&" symbol in a policy name

2) After creation, "&" will be substituted by &amp;

3) Next, after every policy update, no matter what is being changed, \{noformat}& -> &\{noformat} substitution will be performed every time, even if user does not change the policy name. Thus, after several updates, simple policy name \{noformat}"test&\{noformat} could be turned into \{noformat}"test&amp;amp;amp;amp;"\{noformat}.

  was:
1) Create a policy with \{noformat}"&"\{noformat} symbol in a policy name

2) After creation, \{noformat}"&"\{noformat} will be substituted by \{noformat}&amp;\{noformat}

3) Next, after every policy update, no matter what is being changed, \{noformat}& -> &amp;\{noformat} substitution will be performed every time, even if user does not change the policy name. Thus, after several updates, simple policy name \{noformat}"test&\{noformat} could be turned into \{noformat}"test&amp;amp;amp;amp;amp;"\{noformat}.


> Using '&' in a policy name leads to unintentional name changes during further updates of policy
> -----------------------------------------------------------------------------------------------
>
>                 Key: RANGER-2261
>                 URL: https://issues.apache.org/jira/browse/RANGER-2261
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 0.7.0
>            Reporter: Alexander Posledov
>            Priority: Major
>
> 1) Create a policy with "&" symbol in a policy name
> 2) After creation, "&" will be substituted by &amp;
> 3) Next, after every policy update, no matter what is being changed, \{noformat}& -> &\{noformat} substitution will be performed every time, even if user does not change the policy name. Thus, after several updates, simple policy name \{noformat}"test&\{noformat} could be turned into \{noformat}"test&amp;amp;amp;amp;"\{noformat}.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)