[RANGER-311] Turning on new validation rules on an existing system/policies could cause problems. We need a way to mitigate those possible problems.

• Type: Sub-task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Alok Lal
• Created: 13/Mar/15 21:40
• Updated: 19/May/15 08:00

Description

One use case is that adding an existing policy via grant/revoke may fail because that "update" runs afoul with new validation rules thereby preventing successful grant/revoke to function. Another use case might be someone trying to bulk load (migrate) policies from, say, dev to test to production. And such a bulk load might be denied either due to incomplete policies in source system or due to newly imposed "fk" constraints.

Possible solutions could be a combination of the following:

• Provide for sensible auto correction of "common" and/or "simple" problems. Some problems may not be sensibly correctable or be risky to auto-correct.
• Provide a tool that can publish a report about possible bulk load issues. This would be coupled with help pages on how to correct a possible problem.