[RANGER-2665] Policy engine for delegate-admin processing is not built correctly when policy-deltas are enabled and a zone policy is updated

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: master
• Fix Version/s: master, 2.1.0
• Component/s: Ranger
• Assignee: Abhay Kulkarni
• Reporter: Abhay Kulkarni
• Created: 06/Dec/19 22:00
• Updated: 21/Jan/20 14:14
• Resolved: 08/Dec/19 01:16

Description

When policy-deltas are enabled, and the only change is to a zone policy, then the policy-engine used for delegate-admin processing fails to build. This may lead to incorrect processing of delegate-admin privileges when the affected policy has delegate-admin policy-item(s).