[jira] [Commented] (RANGER-5729) Unable to import exported GDS policies via Service Manager due to 403 Error

["Dineshkumar Yadav (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RANGER-5729?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18103290#comment-18103290 ] 

Dineshkumar Yadav commented on RANGER-5729:
-------------------------------------------

Apache Master commit : https://github.com/apache/ranger/commit/421db18c0aa5dce17114f62aaadbd381f219a617

> Unable to import exported GDS policies via Service Manager due to 403 Error
> ---------------------------------------------------------------------------
>
>                 Key: RANGER-5729
>                 URL: https://issues.apache.org/jira/browse/RANGER-5729
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>            Reporter: Sanket Shelar
>            Assignee: Sanket Shelar
>            Priority: Minor
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> If a GDS-related policy is present on the cluster and we export policies from the Report page, it exports *all* policies. However, when trying to import that policy via the Service Manager page, it triggers a 403 error
> h3. Steps to Reproduce
>  # Ensure a GDS-related policy is present on the cluster.
>  # Navigate to the *Report* page and export the policy.
>  # Navigate to the *Service Manager* page.
>  # Attempt to import the newly exported policy file.
>  
> {code:java}
> beeline -e "create database vehicle;"
> beeline -e "create table vehicle.cars(car_id int, car_name string, car_color string, car_price int);"
> beeline -e "select * from vehicle.cars;"
> ------------------Create datashare---------
> curl -ik -u admin:rangerR0cks! -X POST -H 'Content-type:application/json' 'http://localhost:6080/service/gds/datashare' -d '{"name": "test_qyhusmk", "service": "dev_hive", "description": "test description 1", "acl": {"users": {"hive": "LIST"}, "groups": {}, "roles": {}}, "zone": "", "defaultAccessTypes": ["all"], "defaultTagMasks": [], "conditionExpr": null, "termsOfUse": "Test terms and conditions"}'
> -------------------create resource in the datashare---------
> curl -ik -u admin:rangerR0cks! -X POST -H 'Content-type:application/json' 'http://localhost:6080/service/gds/resource' -d '{"name": "test_resource_test_qyhusmk", "dataShareId": 1, "resource": {"column": {"values": ["*"], "isExcludes": false, "isRecursive": false}, "table": {"values": ["cars"], "isExcludes": false, "isRecursive": false}, "database": {"values": ["vehicle"], "isExcludes": false, "isRecursive": false}}, "conditionExpr": null, "accessTypes": null}'
> -----------------------Create dataset--------------
> curl -ik -u admin:rangerR0cks! -X POST -H 'Content-type:application/json' 'http://localhost:6080/service/gds/dataset' -d '{"name": "dataset_test1", "acl": {"users": {"admin": "ADMIN"}, "groups": {}, "roles": {}}, "description": "dataset_qyhusmk_description", "termsOfUse": ""}'
> --------------------Create dataset policy-------
> curl -ik -u admin:rangerR0cks! -X POST -H 'Content-type:application/json' 'http://localhost:6080/service/gds/dataset/1/policy' -d '{"policyItems":[{"accesses":[{"type":"_READ","isAllowed":true}],"users":["hive"],"groups":[],"roles":[]}],"policyLabels":[],"policyPriority":"0","resources":{"dataset":{"values":["dataset_test1"]}},"conditions":[]}'
> ----------------------Add datashare in the dataset-------
> curl -ik -u admin:rangerR0cks! -X POST -H 'Content-type:application/json' 'http://localhost:6080/service/gds/datashare/dataset' -d '{"datasetId": 1, "dataShareId": 1, "status": "ACTIVE"}'
> {code}
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)