[ 
https://issues.apache.org/jira/browse/RANGER-1090?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15378412#comment-15378412
 ] 

Velmurugan Periasamy commented on RANGER-1090:
----------------------------------------------

Patch committed to master. 
https://git-wip-us.apache.org/repos/asf?p=incubator-ranger.git;a=commit;h=8762a8c795d09210fd7293cebf71603bffe644ec

> Revoke command with grant option does not disable delegated admin permission 
> for users/groups in the corresponding policy
> -------------------------------------------------------------------------------------------------------------------------
>
>                 Key: RANGER-1090
>                 URL: https://issues.apache.org/jira/browse/RANGER-1090
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 0.6.0
>            Reporter: Pradeep Agrawal
>            Assignee: Pradeep Agrawal
>             Fix For: 0.7.0
>
>
> Pre-requisites Steps :
> Install Ranger, Hive Component and enable Ranger for Hive component.
> Steps to Reproduce:
> Execute grant command(with grant option) in hive; at Ranger end it will 
> create policy with corresponds details specified in the grant command like 
> resources, permission, users, groups and also enables delegatedAdmin 
> permission(set to true).
> Sample : grant select, UPDATE ON TABLE xatestgr.testtable to USER user1 with 
> grant option;
> Now execute revoke command with 'revoke grant option' from hive; at Ranger 
> end it will update policy with correct info as specified in the revoke 
> command like resources, users/groups, access permissions but it does not 
> change delegatedAdmin permission(back to false)
> Sample : revoke grant option for select, create, update, drop ON TABLE 
> xatestgr.testtable FROM USER user1;
> Expected behaviour :
> When run revoke command with 'revoke grant option' it should change delegated 
> admin permission.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to