[
https://issues.apache.org/jira/browse/SENTRY-302?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Arun Suresh updated SENTRY-302:
-------------------------------
Attachment: SENTRY-302.test.patch
Attaching fail test case
> Partial revoke on Table fails if both ALL and a SELECT/INSERT grant exists
> --------------------------------------------------------------------------
>
> Key: SENTRY-302
> URL: https://issues.apache.org/jira/browse/SENTRY-302
> Project: Sentry
> Issue Type: Bug
> Reporter: Arun Suresh
> Assignee: Arun Suresh
> Labels: grant/revoke
> Fix For: 1.4.0
>
> Attachments: SENTRY-302.test.patch
>
>
> Test case to show when revoke does not work :
> {noformat}
> 1. Create 1 Role (user_role & user_role2)
> 2. Create a Table t1
> 3. grant ALL on t1 to user_role
> 4. grant INSERT on t1 to user_role1
> 5. Revoke INSERT on t1 from user_role
> - This would imply user_role can still SELECT
> - But user_role should NOT be allowed to LOAD
> 6. Observed that INSERT is still allowed on table
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.2#6252)
