Major Description
getResourceACL() method returns all permissions specified for a given resource in Ranger policies. In case of policies with macros in resource names, like test_{USER}, /department/${{USER.dept}}, getResourceACLs() should return ACCESS_CONDITIONAL, since the access depends of user/user/attributes. Currently getResourceACLs() doesn't include users/groups/roles listed in such policies. This should be fixed to have these users/groups/roles as having conditional access.