[RANGER-3509] update role fails for role admins

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0, 2.2.0
• Fix Version/s: 3.0.0, 2.3.0
• Component/s: Ranger
• Assignee: Madhan Neethiraj
• Reporter: Madhan Neethiraj
• Created: 09/Nov/21 10:00
• Updated: 16/Apr/22 05:31
• Resolved: 09/Nov/21 19:40

Description

Non-admin users designated as a role-admin in a role are unable to update the role. Here are the repro steps:

1. "user1" is a non-admin user in Ranger
2. Create role "role1" in Ranger and assign user "user1" as a role admin
3. Give user "user1" access to the user/permissions portion of the admin interface
4. Login as "user1"
5. go to 'Settings -> Users/Groups/Roles'
6. select tab 'Roles'
7. select role "role1"
8. Add a user (or a group or a role) to this role
9. Click 'Save' button

Operation failed with the following error: "User does not have permission for this operation".

 

Since 'user1' is designated as a role admin (in step #2 above), the user should be allowed to update the role.