Is this file for policies going to be ingested eve...
# troubleshoot
s
Is this file for policies going to be ingested every time on boot or just once? https://github.com/linkedin/datahub/blob/master/metadata-service/war/src/main/resources/boot/policies.json Asking because I would like to change the root user to a group by ingesting these MCEs after the first boot
v0.8.12 BUG It seems it is being ingested every time. The problem is this policy
Copy code
All Users - Default Platform Privileges - Manage Policies & View Analytics
This is giving everyone access to manage policies. I edited it to change it specific group. But it got changed. It seems one of the pods restarted and sent this MCE again. @mammoth-bear-12532 @big-carpet-38439 Access control cannot be used due to everyone being able to edit policies every time a pod restarts
m
Thanks for flagging this @square-activity-64562.
b
Just please remove the policy from policies.json
The all users one
@square-activity-64562 This will solve your problem. We do want the datahub policies to be ingested on boot. If they are already there, this will be a no-op. As for the all users policy, perhaps we can make that one only ingest a single time
We will likely need to followup to add a check whether any policies exist. If they do, we'll skip ingestion
t
fyi @bitter-dusk-52400