[RANGER-4690] Access Audits - Resource policy version used for mask policy leading to Error page

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0, 2.5.0
• Component/s: Ranger
• Assignee: Sanket Shelar
• Reporter: suja s
• Created: 06/Feb/24 12:27
• Updated: 21/Jun/24 14:58
• Resolved: 08/Feb/24 09:29

Description

Create a ranger hive policy for user u1 to access table t1.
Create table t1 and add data
Edit the policy to have multiple versions. Polocy version is now 'y'
Create a ranger hive masking policy for one of the columns of t1.
Edit the policy to have multiple versions. Policy version is less than 'y'
example, if resource policy version is 5, have masking policy version as 4.
Try insert command on t1. It fails now as there is a masking policy.
Inspect access audits on ranger admin UI. Click on policyid for the denied audit for insert

CURRENT BEHAVIOUR:
Access audits show version of resource policy for mask policy id, so querying for policy details leads to data not found error page

Policy cache json file on plugin side has the right version, x_policy table has the right entries for corresponding masking policy

Issue Links

• links to: Apache Review request