[jira] [Created] (RANGER-1176) Ranger admin does not allow to create / update a policy with only delegate admin permission

["Vipin Rathor (JIRA)" <ji...@apache.org>]

Vipin Rathor created RANGER-1176:
------------------------------------

             Summary: Ranger admin does not allow to create / update a policy with only delegate admin permission
                 Key: RANGER-1176
                 URL: https://issues.apache.org/jira/browse/RANGER-1176
             Project: Ranger
          Issue Type: Bug
          Components: admin
    Affects Versions: 0.5.0
            Reporter: Vipin Rathor
            Priority: Minor


As of RANGER-436, a policy with empty access list is valid if delegated admin is true. But the Ranger Admin UI doesn't allow user to create / update a policy with only the 'delegate admin' permission for a user / group.

Expected Result:
Create / update policy with only 'delegate admin' permission should be allowed via Ranger Admin UI 

Actual Result:
Upon saving, the create page throws this error for user:
"Please add permission(s) for the selected User, else User will not be added."
And similar error for group:
"Please add permission(s) for the selected Group, else Group will not be added."

Workaround:
As of now, the workaround is to create / update the policy via REST API. But the only caveat is user will not be able to edit the policy again via Admin UI.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)