You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Lingaraj Gowdar (Jira)" <ji...@apache.org> on 2024/07/16 14:46:00 UTC
[jira] [Created] (RANGER-4860) Ranger With ABAC - Row level filter is not working
Lingaraj Gowdar created RANGER-4860:
---------------------------------------
Summary: Ranger With ABAC - Row level filter is not working
Key: RANGER-4860
URL: https://issues.apache.org/jira/browse/RANGER-4860
Project: Ranger
Issue Type: Bug
Components: Ranger, tagsync
Reporter: Lingaraj Gowdar
With Java17 compiled code,
From Ranger, Create this access policy to allow access to the session_data and session_table
!image-2024-07-16-20-10-02-017.png!
!image-2024-07-16-20-10-31-432.png!
Run select * from session_table; when row level filter is enabled and disabled
+*Expected:*+
When row level filter policy is {*}disabled{*}, the below query should work
select * from session_table;
+----------+--------+---------------+--------------+------------------------+------------------------+
| user | email | password | application | start_time | end_time |
+----------+--------+---------------+--------------+------------------------+------------------------+
| lgowdar | NULL | LLLLLLLLLLLL | ambari | 2023-10-10 02:49:43.0 | 2023-10-10 09:14:45.0 |
| lgowdar | NULL | LLLLLLLLLLLL | ranger | 2023-10-10 02:49:43.0 | 2023-10-10 09:14:45.0 |
| lgowdar | NULL | LLLLLLLLLLLL | ambari | 2023-08-10 02:49:43.0 | 2023-08-10 09:14:45.0 |
+----------+--------+---------------+--------------+------------------------+------------------------+
It should work when row level policy is enabled.
+*Actual:*+
Query fails with NullPointerException when row level filter is enabled
Error: Error while compiling statement: FAILED: NullPointerException Cannot invoke "javax.script.ScriptEngine.createBindings()" because "scriptEngine" is null
Please ignore line number 1, marked in the above error message. Error at line 59. (state=,code=0)
+*Note:*+
It works when tried with NTID user in a Condition like : `user`="<NTID_USER>"
--
This message was sent by Atlassian Jira
(v8.20.10#820010)