[jira] [Created] (RANGER-1409) User role get deleted from table when he tries to update his role to a restricted role

["Pradeep Agrawal (JIRA)" <ji...@apache.org>]

Pradeep Agrawal created RANGER-1409:
---------------------------------------

             Summary: User role get deleted from table when he tries to update his role to a restricted role
                 Key: RANGER-1409
                 URL: https://issues.apache.org/jira/browse/RANGER-1409
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
    Affects Versions: 0.6.0, 0.5.0, 0.7.0
            Reporter: Pradeep Agrawal
            Assignee: Pradeep Agrawal


*Problem Statement :* User role get deleted from x_portal_user_role table and login does not work when he tries to update his role to a restricted role for his profile by using Post method of API /service/users/ . 
User having role 'ROLE_SYS_ADMIN' can change his role to 'ROLE_USER'
User having role 'ROLE_KEY_ADMIN' can change his role to 'ROLE_USER'
User having role 'ROLE_USER' should not able to change his role to any other role.
*Proposed solution :* User's new requested role should be validated and if requested role is invalid then server should return error message.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)