[jira] [Created] (RANGER-4966) Remove self node from the resourceTrie only if it has no children, no evaluators and no wildcard-evaluators

["Abhay Kulkarni (Jira)" <ji...@apache.org>]

Abhay Kulkarni created RANGER-4966:
--------------------------------------

             Summary: Remove self node from the resourceTrie only if it has no children, no evaluators and no wildcard-evaluators
                 Key: RANGER-4966
                 URL: https://issues.apache.org/jira/browse/RANGER-4966
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
            Reporter: Abhay Kulkarni
            Assignee: Abhay Kulkarni


If the policy-deltas are enabled, then when two policies have a common subset of resources and are defined on same user (or subset of users, through groups or direct users), if one of these policies is modified (on anything: name, resource, user), it is the only one in effect during access evaluation. Until a restart of the underlying service. 

The underlying cause is a ResourceTrie node referring to modified policy-evaluator is removed even when it contains wildcard-evaluator(s).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)