Gregory Chanan created SENTRY-1308:
--------------------------------------
Summary: Generic Model is consistent with role checking
Key: SENTRY-1308
URL: https://issues.apache.org/jira/browse/SENTRY-1308
Project: Sentry
Issue Type: Bug
Components: Service
Affects Versions: 1.8.0
Reporter: Gregory Chanan
Attachments: SENTRY-1308.patch
Roles are sometimes checked not in privilege commands:
List: not checked
Grant: checked
Revoke: checked
For consistency, I would argue they should always be checked. One counter
argument could be that not checking is valid if an empty set of privileges are
returned for list, but given you can't grant a privilege on a role that doesn't
exist, this isn't interesting.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
