Major Description
Currently Ranger admins have to do a service def update to turn on Deny Conditions block and Deny/Allow Except conditions in their Ranger install for resource based policies. But these are enabled by default for tag based policies. It would be useful to have consistency and turn this feature consistently ON by default for both resource and tag based policies.