Pradeep Agrawal created RANGER-1090:
---------------------------------------
Summary: Revoke command with grant option does not disable
delegated admin permission for users/groups in the corresponding policy
Key: RANGER-1090
URL: https://issues.apache.org/jira/browse/RANGER-1090
Project: Ranger
Issue Type: Bug
Components: Ranger
Affects Versions: 0.6.0
Reporter: Pradeep Agrawal
Assignee: Pradeep Agrawal
Fix For: 0.6.0
Pre-requisites Steps :
Install Ranger, Hive Component and enable Ranger for Hive component.
Steps to Reproduce:
Execute grant command(with grant option) in hive; at Ranger end it will create
policy with corresponds details specified in the grant command like resources,
permission, users, groups and also enables delegatedAdmin permission(set to
true).
Sample : grant select, UPDATE ON TABLE xatestgr.testtable to USER user1 with
grant option;
Now execute revoke command with 'revoke grant option' from hive; at Ranger end
it will update policy with correct info as specified in the revoke command like
resources, users/groups, access permissions but it does not change
delegatedAdmin permission(back to false)
Sample : revoke grant option for select, create, update, drop ON TABLE
xatestgr.testtable FROM USER user1;
Expected behaviour :
When run revoke command with 'revoke grant option' it should change delegated
admin permission.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
