Major Description
When policy deltas are enabled, and there is no material change in policy-set after previous policy download processed by Ranger admin, the ServicePolicies object downloaded contains null value instead of an empty list for policyDeltas attribute because of change made to the annotations by RANGER-3948. As the plugin considers empty-list value differently than null value, the policy-engine built by the plugin does not correctly reflect the existing policy-set, and leads to incorrect authorization result.
A material change to policy-set indicates that there is at least one policy added/deleted/updated to previous policy-set.