Major Description
I operate an Apache Ranger with Active Directory. There are group names with ampersand(&). If I add a policy with these groups, ampersand is html-escaped and it doesn't work properly.
User, group and role names in policy items should not be html-escaped.
