Ranger UI does not display deny policy items
If you need to view deny
policy details related to a DLM
replication policy, you need to use the Ranger UI. However, when a policy with deny
conditions is created on Ranger-admin in a replication relationship, the Policy Details
page in Ranger does not display the deny policy items. To make the policy visible,
update the respective service-def
with
enableDenyAndExceptionsInPolicies="true"
option.
Refer to section "2.2 Enhanced Policy model" in https://cwiki.apache.org/confluence/display/RANGER/Deny-conditions+and+excludes+in+Ranger+policies.