Description
RANGER-2507 introduced flag isDenyAllElse in RangerPolicy to implicitly deny accesses other than the ones granted in this policy. Such policies incorrectly deny requests to check if the user has any access for a given resource - if the policy explicitly doesn't allow the user any access. This is incorrect, as this prevents other policies from being evaluated to check if they grant the user any access.
Attachments
Issue Links
- is caused by
-
RANGER-2507 Support for policy to implicitly deny all accesses not explicitly allowed by it
-
- Resolved
-