[RANGER-4966] Remove self node from the resourceTrie only if it has no children, no evaluators and no wildcard-evaluators

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Component/s: Ranger
• Assignee: Abhay Kulkarni
• Reporter: Abhay Kulkarni
• Created: 22/Oct/24 18:21
• Updated: 14/Nov/24 17:45
• Resolved: 23/Oct/24 16:58

Description

If the policy-deltas are enabled, then when two policies have a common subset of resources and are defined on same user (or subset of users, through groups or direct users), if one of these policies is modified (on anything: name, resource, user), it is the only one in effect during access evaluation. Until a restart of the underlying service. 

The underlying cause is a ResourceTrie node referring to modified policy-evaluator is removed even when it contains wildcard-evaluator(s).