You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "t oo (JIRA)" <ji...@apache.org> on 2018/06/09 07:26:00 UTC

[jira] [Created] (RANGER-2130) Ranger Admin - client-side control bypass

t oo created RANGER-2130:
----------------------------

             Summary: Ranger Admin - client-side control bypass
                 Key: RANGER-2130
                 URL: https://issues.apache.org/jira/browse/RANGER-2130
             Project: Ranger
          Issue Type: Bug
          Components: admin
    Affects Versions: 1.0.0
            Reporter: t oo


In the rangeradmin ui, on the users page, after clicking on a user. If you edit the html on the site (ie in Chrome) you can remove the 'disabled' tag so that the role of User becomes ungreyed out and you can change the role from User to Admin!



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)