Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Subtask] Fail to delete the role for the authorization plugin #5130

Closed
Tracked by #5115
jerqi opened this issue Oct 14, 2024 · 0 comments
Closed
Tracked by #5115

[Subtask] Fail to delete the role for the authorization plugin #5130

jerqi opened this issue Oct 14, 2024 · 0 comments
Labels
subtask Subtasks of umbrella issue

Comments

@jerqi
Copy link
Contributor

jerqi commented Oct 14, 2024

Describe the subtask

Fail to delete the role for the authorization plugin

[org.apache.gravitino.authorization.ranger.RangerAuthorizationPlugin.doRemoveSecurableObject(RangerAuthorizationPlugin.java:470)] - Cannot find the Ranger policy(role1) for the Gravitino securable object(catalog_hive.access_control)!

024-10-14 12:57:37.589 WARN [Gravitino-webserver-41] [org.apache.gravitino.authorization.ranger.RangerAuthorizationPlugin.doRemoveSecurableObject(RangerAuthorizationPlugin.java:470)] - Cannot find the Ranger policy(role1) for the Gravitino securable object(catalog_hive.access_control)!
2024-10-14 12:57:37.632 WARN [Gravitino-webserver-41] [org.apache.gravitino.authorization.ranger.RangerAuthorizationPlugin.onRoleDeleted(RangerAuthorizationPlugin.java:142)] - Ranger delete role: org.apache.gravitino.meta.RoleEntity@4af36103 failed!
org.apache.ranger.RangerServiceException: Ranger API org.apache.ranger.RangerClient$API@3c684115 failed: statusCode=400, status=Bad Request, response:{"statusCode":1,"msgDesc":"Role 'role1' can not be deleted as it is referenced in one or more policies"}
        at org.apache.ranger.RangerClient.responseHandler(RangerClient.java:521) ~[?:?]
        at org.apache.ranger.RangerClient.callAPI(RangerClient.java:531) ~[?:?]
        at org.apache.ranger.RangerClient.deleteRole(RangerClient.java:387) ~[?:?]
        at org.apache.gravitino.authorization.ranger.RangerAuthorizationPlugin.onRoleDeleted(RangerAuthorizationPlugin.java:139) ~[?:?]
        at org.apache.gravitino.authorization.RoleManager.lambda$deleteRole$2(RoleManager.java:152) ~[gravitino-core-0.6.0-incubating.jar:?]
        at org.apache.gravitino.authorization.AuthorizationUtils.callAuthorizationPluginImpl(AuthorizationUtils.java:192) ~[gravitino-core-0.6.0-incubating.jar:?]
        at org.apache.gravitino.authorization.AuthorizationUtils.callAuthorizationPluginForSecurableObjects(AuthorizationUtils.java:163) ~[gravitino-core-0.6.0-incubating.jar:?]
        at org.apache.gravitino.authorization.RoleManager.deleteRole(RoleManager.java:148) ~[gravitino-core-0.6.0-incubating.jar:?]
        at org.apache.gravitino.authorization.AccessControlManager.deleteRole(AccessControlManager.java:144) ~[gravitino-core-0.6.0-incubating.jar:?]
        at org.apache.gravitino.hook.AccessControlHookDispatcher.deleteRole(AccessControlHookDispatcher.java:148) ~[gravitino-core-0.6.0-incubating.jar:?]
        at org.apache.gravitino.server.web.rest.RoleOperations.lambda$deleteRole$6(RoleOperations.java:163) ~[gravitino-server-0.6.0-incubating.jar:?]
        at org.apache.gravitino.lock.TreeLockUtils.doWithTreeLock(TreeLockUtils.java:49) ~[gravitino-core-0.6.0-incubating.jar:?]
        at org.apache.gravitino.server.web.rest.RoleOperations.lambda$deleteRole$7(RoleOperations.java:160) ~[gravitino-server-0.6.0-incubating.jar:?]
        at java.base/java.security.AccessController.doPrivileged(AccessController.java:712) ~[?:?]
        at java.base/javax.security.auth.Subject.doAs(Subject.java:439) ~[?:?]
        at org.apache.gravitino.utils.PrincipalUtils.doAs(PrincipalUtils.java:39) ~[gravitino-core-0.6.0-incubating.jar:?]
        at org.apache.gravitino.server.web.Utils.doAs(Utils.java:149) ~[gravitino-server-0.6.0-incubating.jar:?]
        at org.apache.gravitino.server.web.rest.RoleOperations.deleteRole(RoleOperations.java:156) ~[gravitino-server-0.6.0-incubating.jar:?]

Parent issue

#5115

@jerqi jerqi added the subtask Subtasks of umbrella issue label Oct 14, 2024
@jerqi jerqi closed this as completed Oct 21, 2024
@xunliu xunliu added this to the Gravitino 0.7.0 milestone Oct 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
subtask Subtasks of umbrella issue
Projects
None yet
Development

No branches or pull requests

2 participants