Details
-
Bug
-
Status: Open
-
Major
-
Resolution: Unresolved
-
2.0.0
-
None
-
None
Description
Current incremental policy update mechanism may cause issues in two cases.
1. When policy is updated, it is consist of two operations: delete then add. Policy is temporarily unavailable after delete operation and before add operation. It may cause task failure.
2. RangerResourceTrie is also updated when matching policies (ref RANGER-2760 and RANGER-2761). Without read write lock, it will lead to chaos and inaccurate result.