Major Description
With RANGER-1781, Ranger supports resource policies with valid, but partial hierarchies specified as the resource. However, during policy evaluation, a partial hierarchy is treated as a complete hierarchy with the unspecified part of the resource hierarchy as having been specified with an all-matching wildcard value (that is, as an asterisk). This leads to such policy matching an accessed resource which has more resource levels than in the policy, and is more permissive than the policy specification.