Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-2618

Restrict rolename change when a policy/another role with that role exist

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.1.0
    • Component/s: admin
    • Labels:
      None

      Description

      When we try to delete a role associated with a ranger policy, the operation is not allowed. Likewise, role edit for rolename change also should be restricted.
      Reason:
      Rolename edit is allowed and the ranger policy still exists with old rolename reference. Policy enforcement happens as per old policy. Rolename change is not taken into consideration during policy download.
      similarly for role which exist in another role rolename update should be restricted

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                nikhil Nikhil Purbhe
                Reporter:
                suja suja s
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: