[RANGER-2176] Ranger allows standard user (not admin) to create/edit/delete policies under an existing HIVE service

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Not A Problem
• Affects Version/s: 1.0.0
• Component/s: admin, Ranger
• Assignee: Unassigned
• Reporter: t oo
• Created: 31/Jul/18 03:41
• Updated: 31/Jul/18 04:20
• Resolved: 31/Jul/18 04:20

Description

1. Login as an admin user
2. Create a HIVE service, create some access and masking policies under the service.
3. Logout of the admin user
4. Login as a standard user (one without admin role)
5. Click the HIVE service
6. Notice how add policy button is present, edit/delete policy buttons are present and clicking through them actually allows you to add/update/delete policies!

Expected behaviour is that policies are read-only to a standard user (without admin role) and policies can't be created as that user.