[
https://issues.apache.org/jira/browse/SENTRY-543?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14224272#comment-14224272
]
Lenni Kuff edited comment on SENTRY-543 at 11/25/14 9:19 AM:
-------------------------------------------------------------
thanks for the test cases, they were very useful.
It is not a DN problem, the problem is with:
{code}
private Set<MSentryPrivilege> getChildPrivileges(Set<String> roleNames,
MSentryPrivilege parent) throws SentryInvalidInputException {
{code}
This function returns all privileges on child objects for the given role, not
just the privileges that have an implied action.
was (Author: lskuff):
thanks for the test cases, they were very useful.
It is not a DN problem, the problem is with:
{code}
private Set<MSentryPrivilege> getChildPrivileges(Set<String> roleNames,
MSentryPrivilege parent) throws SentryInvalidInputException {
{code}
This function returns all matching privileges on child objects, not just the
privileges that have an implied action.
> Sentry Store permission dump incorrect after recursive revoke
> -------------------------------------------------------------
>
> Key: SENTRY-543
> URL: https://issues.apache.org/jira/browse/SENTRY-543
> Project: Sentry
> Issue Type: Bug
> Affects Versions: 1.4.0
> Reporter: Arun Suresh
> Assignee: Lenni Kuff
> Attachments: SENTRY-543.test.2.patch, SENTRY-543.test.patch
>
>
> The {{SentryStore}} exposes an method to dump the complete permission image..
> this is used to push full sync messages to the Sentry Namenode plugin.
> For some reason, this image dump is incorrect after a recursive revoke
> operation.
> Attaching testcase to reproduce this issue..
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
