You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Madhan Neethiraj (JIRA)" <ji...@apache.org> on 2016/03/15 17:00:35 UTC
[jira] [Resolved] (RANGER-428) After renaming a repository, changes
on existing policies within the repository will not show any effect
[ https://issues.apache.org/jira/browse/RANGER-428?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Madhan Neethiraj resolved RANGER-428.
-------------------------------------
Resolution: Not A Bug
The name of the repository in Ranger Admin (aka policy manager) should be same as the name referenced by the plugin. If a repository is renamed in one of these places (plugin or Ranger Admin), the name should be updated in other as well.
> After renaming a repository, changes on existing policies within the repository will not show any effect
> --------------------------------------------------------------------------------------------------------
>
> Key: RANGER-428
> URL: https://issues.apache.org/jira/browse/RANGER-428
> Project: Ranger
> Issue Type: Bug
> Affects Versions: 0.4.0
> Environment: Hortonworks HDP 2.2 on Sandbox
> Reporter: Andreas Widmann
> Priority: Critical
>
> When you change the name of a repository inside the Ranger Policy Manager (e.g. the name "sandbox_hdfs" of the HDFS repository), all changes you make on existing policies within the repository will not show any effect.
> Steps to follow the issue on Hortonworks HDP 2.2 sandbox:
> 1. Change the name of HDFS repository to "hdfs".
> 2. Remove the Write, Execute and Admin rights from policy "HDFS Global Allow".
> 3. Try with a user of your choice to create a new directory "test" in the root of HDFS (via curl command on shell).
> 4. Regarding to the policy, the command musntĀ“t be executed successfully (due to insufficient permissions). But all users have still full rights (Read, Write, Execute and Admin) on (Web)HDFS.
> The bug will remain until the name of the repository has been changed back to the original name.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)