[RANGER-3343] Ranger policy cache is incorrect in some scenario

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0, 2.2.0
• Component/s: Ranger
• Assignee: Abhay Kulkarni
• Reporter: Abhay Kulkarni
• Created: 19/Jul/21 22:34
• Updated: 02/Aug/21 15:42
• Resolved: 20/Jul/21 15:22

Description

Steps are : # There are two external users : diasmi(user role) and diasmi_admin (admin role).

1. diasmi is granted a delegated admin privilege on some resource.
2. Log in to Ranger admin GUI from as diasmi_admin and change the policy (first policy item) for the resource.
3. Wait for policy sync. policy cache json is correct and it has both policy item entries.
4. Log in to Ranger admin GUI as diasmi user and change the policy to add another policy item (second policy-item) with the delegated-admin box unchecked.
5. Wait for policy sync. policy cache json is incorrect and it has only first policy item entry.

Issue Links

• is related to: RANGER-3122 Support delegate-admin for specific permissions
• relates to: RANGER-3360 Best Practice: Use updated policy object after pruning the policy object