RANGER-4961: fix REST API to retrieve policies for a resource to incl…

…ude tag-based policies as well
apache · Oct 18, 2024 · 41de6c6 · 41de6c6
1 parent 16c94a9
commit 41de6c6
Showing 1 changed file with 11 additions and 9 deletions.
diff --git a/...ts-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyRepository.java b/...ts-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyRepository.java
@@ -1021,17 +1021,19 @@ private List<RangerContextEnricher> buildContextEnrichers(RangerPolicyEngineOpti
                     }
                 }
 
-                if (!options.disableContextEnrichers) {
-                    RangerServiceDef.RangerContextEnricherDef contextEnricherDef = enricherDef;
-
-                    // Following will be true only if the engine is initialized within ranger-admin
-                    if (options.enableTagEnricherWithLocalRefresher && StringUtils.equals(enricherDef.getEnricher(), RangerTagEnricher.class.getName())) {
-                        contextEnricherDef = new RangerServiceDef.RangerContextEnricherDef(enricherDef.getItemId(), enricherDef.getName(), "org.apache.ranger.common.RangerAdminTagEnricher", null);
-                    } else if (options.enableUserStoreEnricherWithLocalRefresher && StringUtils.equals(enricherDef.getEnricher(), RangerUserStoreEnricher.class.getName())) {
-                        contextEnricherDef = new RangerServiceDef.RangerContextEnricherDef(enricherDef.getItemId(), enricherDef.getName(), "org.apache.ranger.common.RangerAdminUserStoreEnricher", null);
+                // Following 2 cases will be true only if the engine is initialized within ranger-admin
+                if (options.enableTagEnricherWithLocalRefresher && StringUtils.equals(enricherDef.getEnricher(), RangerTagEnricher.class.getName())) {
+                    enricherDef = new RangerServiceDef.RangerContextEnricherDef(enricherDef.getItemId(), enricherDef.getName(), "org.apache.ranger.common.RangerAdminTagEnricher", null);
+                } else if (options.enableUserStoreEnricherWithLocalRefresher && StringUtils.equals(enricherDef.getEnricher(), RangerUserStoreEnricher.class.getName())) {
+                    enricherDef = new RangerServiceDef.RangerContextEnricherDef(enricherDef.getItemId(), enricherDef.getName(), "org.apache.ranger.common.RangerAdminUserStoreEnricher", null);
+                } else {
+                    if (options.disableContextEnrichers) {
+                        enricherDef = null;
                     }
+                }
 
-                    RangerContextEnricher contextEnricher = buildContextEnricher(contextEnricherDef, options);
+                if (enricherDef != null) {
+                    RangerContextEnricher contextEnricher = buildContextEnricher(enricherDef, options);
 
                     if (contextEnricher != null) {
                         contextEnrichers.add(contextEnricher);