Description
There may be multiple policies with the same resource signature within a service (at most one enabled policy and potentially any number of disabled policies). Therefore, the resource-signature uniqueness within a service cannot be enforced at the database level.
The proposal is to encode GUID of a disabled policy within the resource signature, thus making the resource signature unique within a service.
Attachments
Issue Links
- fixes
-
RANGER-3472 The createPolicy() method is not thread safe. In another word, we can create policies with same resources when creating policies concurrently
-
- Resolved
-