Description
Steps are : # There are two external users : diasmi(user role) and diasmi_admin (admin role).
- diasmi is granted a delegated admin privilege on some resource.
- Log in to Ranger admin GUI from as diasmi_admin and change the policy (first policy item) for the resource.
- Wait for policy sync. policy cache json is correct and it has both policy item entries.
- Log in to Ranger admin GUI as diasmi user and change the policy to add another policy item (second policy-item) with the delegated-admin box unchecked.
- Wait for policy sync. policy cache json is incorrect and it has only first policy item entry.
Attachments
Issue Links
- is related to
-
RANGER-3122 Support delegate-admin for specific permissions
- Resolved
- relates to
-
RANGER-3360 Best Practice: Use updated policy object after pruning the policy object
- Resolved