[
https://issues.apache.org/jira/browse/RANGER-1090?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15384032#comment-15384032
]
Gautam Borad commented on RANGER-1090:
--------------------------------------
Additional patch committed to master :
https://github.com/apache/incubator-ranger/commit/3a0b69e38a72827df26719e565b43d5bfc33d7c6
> Revoke command with grant option does not disable delegated admin permission
> for users/groups in the corresponding policy
> -------------------------------------------------------------------------------------------------------------------------
>
> Key: RANGER-1090
> URL: https://issues.apache.org/jira/browse/RANGER-1090
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Affects Versions: 0.6.0
> Reporter: Pradeep Agrawal
> Assignee: Pradeep Agrawal
> Fix For: 0.7.0
>
> Attachments: RANGER-1090-2.patch, RANGER-1090-3.patch
>
>
> Pre-requisites Steps :
> Install Ranger, Hive Component and enable Ranger for Hive component.
> Steps to Reproduce:
> Execute grant command(with grant option) in hive; at Ranger end it will
> create policy with corresponds details specified in the grant command like
> resources, permission, users, groups and also enables delegatedAdmin
> permission(set to true).
> Sample : grant select, UPDATE ON TABLE xatestgr.testtable to USER user1 with
> grant option;
> Now execute revoke command with 'revoke grant option' from hive; at Ranger
> end it will update policy with correct info as specified in the revoke
> command like resources, users/groups, access permissions but it does not
> change delegatedAdmin permission(back to false)
> Sample : revoke grant option for select, create, update, drop ON TABLE
> xatestgr.testtable FROM USER user1;
> Expected behaviour :
> When run revoke command with 'revoke grant option' it should change delegated
> admin permission.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
