(ranger) branch master updated: RANGER-5214 : Fix for KMS throwing IOException instead of AccessControlException (#579)

[dhavalshah9131]

This is an automated email from the ASF dual-hosted git repository.

dhavalshah9131 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ranger.git


The following commit(s) were added to refs/heads/master by this push:
     new c1f915e5e RANGER-5214 : Fix for KMS throwing IOException instead of 
AccessControlException (#579)
c1f915e5e is described below

commit c1f915e5e0d765d210db99bfeb0393484e1abae6
Author: Vikas Kumar <talktovikas...@gmail.com>
AuthorDate: Fri May 23 19:39:36 2025 +0530

    RANGER-5214 : Fix for KMS throwing IOException instead of 
AccessControlException (#579)
---
 kms/src/main/java/org/apache/hadoop/crypto/key/kms/server/KMS.java | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kms/src/main/java/org/apache/hadoop/crypto/key/kms/server/KMS.java 
b/kms/src/main/java/org/apache/hadoop/crypto/key/kms/server/KMS.java
index f90864907..507a97d57 100644
--- a/kms/src/main/java/org/apache/hadoop/crypto/key/kms/server/KMS.java
+++ b/kms/src/main/java/org/apache/hadoop/crypto/key/kms/server/KMS.java
@@ -507,7 +507,7 @@ public Response generateDataKey(@PathParam("name") final 
String name, @Context H
         } catch (Exception e) {
             LOG.error("Exception in generateDataKey:", e);
 
-            throw new IOException(e);
+            throw e;
         } finally {
             LOG.debug("<== generateDataKey(name={}", name);
         }
@@ -533,8 +533,8 @@ public Response generateEncryptedKeys(@PathParam("name") 
final String name, @Que
             if (edekOp.equals(KMSRESTConstants.EEK_GENERATE)) {
                 final List<EncryptedKeyVersion> retEdeks = new LinkedList<>();
 
+                assertAccess(Type.GENERATE_EEK, user, KMSOp.GENERATE_EEK, 
name, request.getRemoteAddr());
                 try {
-                    assertAccess(Type.GENERATE_EEK, user, KMSOp.GENERATE_EEK, 
name, request.getRemoteAddr());
                     user.doAs((PrivilegedExceptionAction<Void>) () -> {
                         for (int i = 0; i < numKeys; i++) {
                             retEdeks.add(provider.generateEncryptedKey(name));