[RANGER-4121] NPE in security-zone update validation

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0, 2.4.0
• Component/s: Ranger
• Assignee: Madhan Neethiraj
• Reporter: Madhan Neethiraj
• Created: 04/Mar/23 09:52
• Updated: 07/Mar/23 00:02
• Resolved: 07/Mar/23 00:02

Description

When a non-admin user attempts to update a security-zone with null description, the API fails with NPE due to the following line in SecurityZoneREST.java:

 

} else if (!securityZone.getDescription().equals(existingSecurityZone.getDescription())) { 

This should be updated to use Objects.equals() to avoid NPE.