[ATLAS-4631] not authorized to perform read type-def of category

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.2.0
• Component/s: atlas-core, hive-integration
• Flags: Important
• Assignee: Unassigned
• Reporter: Cyndia Li
• Created: 08/Jul/22 02:16
• Updated: 08/Jul/22 02:27

Description

Dear Team

 

After integrated Atlas with Ranger, the Atlas admin account is unable to:

1) create/update existing (Sub)Classifications, which have been associated with hive entities

2) create Business Metadata for hive entities

 

but able to:

1) create new Classifications, which do not have relationship with hive entities.

2) create new Business Metadata with no hive entities associated

 

Error message: **

Web UI:

admin is not authorized to perform read type-def of category CLASSIFICATION...

Please kindly see the attached pic for the details.

 

*Rest API: GET ​/v2​/types​/classificationdef​/name​/{name}*

_

{"errorCode":"ATLAS-403-00-001","errorMessage":"admin is not authorized to perform read type Classified Information"}

_

 

Wondering if additional policy needs to be set up in Ranger?

Would you please provide solution to this case, thank you!

 

Best Regards,

Cyndia