You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Fail to delete the role for the authorization plugin
[org.apache.gravitino.authorization.ranger.RangerAuthorizationPlugin.doRemoveSecurableObject(RangerAuthorizationPlugin.java:470)] - Cannot find the Ranger policy(role1) for the Gravitino securable object(catalog_hive.access_control)!
024-10-14 12:57:37.589 WARN [Gravitino-webserver-41] [org.apache.gravitino.authorization.ranger.RangerAuthorizationPlugin.doRemoveSecurableObject(RangerAuthorizationPlugin.java:470)] - Cannot find the Ranger policy(role1) for the Gravitino securable object(catalog_hive.access_control)!
2024-10-14 12:57:37.632 WARN [Gravitino-webserver-41] [org.apache.gravitino.authorization.ranger.RangerAuthorizationPlugin.onRoleDeleted(RangerAuthorizationPlugin.java:142)] - Ranger delete role: org.apache.gravitino.meta.RoleEntity@4af36103 failed!
org.apache.ranger.RangerServiceException: Ranger API org.apache.ranger.RangerClient$API@3c684115 failed: statusCode=400, status=Bad Request, response:{"statusCode":1,"msgDesc":"Role 'role1' can not be deleted as it is referenced in one or more policies"}
at org.apache.ranger.RangerClient.responseHandler(RangerClient.java:521) ~[?:?]
at org.apache.ranger.RangerClient.callAPI(RangerClient.java:531) ~[?:?]
at org.apache.ranger.RangerClient.deleteRole(RangerClient.java:387) ~[?:?]
at org.apache.gravitino.authorization.ranger.RangerAuthorizationPlugin.onRoleDeleted(RangerAuthorizationPlugin.java:139) ~[?:?]
at org.apache.gravitino.authorization.RoleManager.lambda$deleteRole$2(RoleManager.java:152) ~[gravitino-core-0.6.0-incubating.jar:?]
at org.apache.gravitino.authorization.AuthorizationUtils.callAuthorizationPluginImpl(AuthorizationUtils.java:192) ~[gravitino-core-0.6.0-incubating.jar:?]
at org.apache.gravitino.authorization.AuthorizationUtils.callAuthorizationPluginForSecurableObjects(AuthorizationUtils.java:163) ~[gravitino-core-0.6.0-incubating.jar:?]
at org.apache.gravitino.authorization.RoleManager.deleteRole(RoleManager.java:148) ~[gravitino-core-0.6.0-incubating.jar:?]
at org.apache.gravitino.authorization.AccessControlManager.deleteRole(AccessControlManager.java:144) ~[gravitino-core-0.6.0-incubating.jar:?]
at org.apache.gravitino.hook.AccessControlHookDispatcher.deleteRole(AccessControlHookDispatcher.java:148) ~[gravitino-core-0.6.0-incubating.jar:?]
at org.apache.gravitino.server.web.rest.RoleOperations.lambda$deleteRole$6(RoleOperations.java:163) ~[gravitino-server-0.6.0-incubating.jar:?]
at org.apache.gravitino.lock.TreeLockUtils.doWithTreeLock(TreeLockUtils.java:49) ~[gravitino-core-0.6.0-incubating.jar:?]
at org.apache.gravitino.server.web.rest.RoleOperations.lambda$deleteRole$7(RoleOperations.java:160) ~[gravitino-server-0.6.0-incubating.jar:?]
at java.base/java.security.AccessController.doPrivileged(AccessController.java:712) ~[?:?]
at java.base/javax.security.auth.Subject.doAs(Subject.java:439) ~[?:?]
at org.apache.gravitino.utils.PrincipalUtils.doAs(PrincipalUtils.java:39) ~[gravitino-core-0.6.0-incubating.jar:?]
at org.apache.gravitino.server.web.Utils.doAs(Utils.java:149) ~[gravitino-server-0.6.0-incubating.jar:?]
at org.apache.gravitino.server.web.rest.RoleOperations.deleteRole(RoleOperations.java:156) ~[gravitino-server-0.6.0-incubating.jar:?]
Describe the subtask
Fail to delete the role for the authorization plugin
Parent issue
#5115
The text was updated successfully, but these errors were encountered: