Arun Suresh created SENTRY-302:
----------------------------------
Summary: Partial revoke on Table fails if both ALL and a
SELECT/INSERT grant exists
Key: SENTRY-302
URL: https://issues.apache.org/jira/browse/SENTRY-302
Project: Sentry
Issue Type: Bug
Reporter: Arun Suresh
Assignee: Arun Suresh
Fix For: 1.4.0
Test case to show when revoke does not work :
{noformat}
1. Create 1 Role (user_role & user_role2)
2. Create a Table t1
3. grant ALL on t1 to user_role
4. grant INSERT on t1 to user_role1
5. Revoke INSERT on t1 from user_role
- This would imply user_role can still SELECT
- But user_role should NOT be allowed to LOAD
6. Observed that INSERT is still allowed on table
{noformat}
--
This message was sent by Atlassian JIRA
(v6.2#6252)
