[
https://issues.apache.org/jira/browse/RANGER-4716?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
suja s updated RANGER-4716:
---------------------------
Description:
On validation with RANGER-4585 fix,
STEPS TO REPRODUCE:
>From impala-shell
Perform grant command execution with set of columns c1,c2 for table t1 for user
u1
Perform revoke command execution on table t1 for user u1
CURRENT BEHAVIOUR:
Revoke execution is shown as successful but ranger policy is not updated tp
remove the user from policy for [db/table]
EXPECTED BEHAVIOUR:
Revoke on table should be able to update the ranger policy to remove user
permissions
was:
On validation with RANGER-4585 fix,
When grant command is invoked separately for different users, even though it is
for same resource and same set of permissions, different policies are created
>From impala-shell
Perform grant command execution with set of columns c1,c2 for table t1 for user
u1
Perform grant command execution with set of columns c1,c2 for table t1 for user
u2
This creates 2 policies even though resources and access types are same
> Revoke on table doesnot update ranger policy if grant was executed on
> specific columns of table
> -----------------------------------------------------------------------------------------------
>
> Key: RANGER-4716
> URL: https://issues.apache.org/jira/browse/RANGER-4716
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: suja s
> Priority: Major
>
> On validation with RANGER-4585 fix,
> STEPS TO REPRODUCE:
> From impala-shell
> Perform grant command execution with set of columns c1,c2 for table t1 for
> user u1
> Perform revoke command execution on table t1 for user u1
> CURRENT BEHAVIOUR:
> Revoke execution is shown as successful but ranger policy is not updated tp
> remove the user from policy for [db/table]
> EXPECTED BEHAVIOUR:
> Revoke on table should be able to update the ranger policy to remove user
> permissions
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
