[ 
https://issues.apache.org/jira/browse/SENTRY-2202?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Arjun Mishra updated SENTRY-2202:
---------------------------------
    Description: When revoking select or insert from privilege should be 
applied to chid priv. For eg if there is ALL on table and SELECT on database 
and SELECT is revoked from database, then table privileges should be changed to 
INSERT. This is not happening in Impala because when looking for child 
privilege we only filter by "//*" as opposed to both "//*" or "all" depending 
on the original privilege  (was: When revoking select or insert from privilege 
should be applied to chid priv. For eg if there is ALL on table and SELECT on 
database and SELECT is revoked from database, then table privileges should be 
changed to INSERT. This is not happening in Impala because when looking for 
child privilege we only filter by "/*" as opposed to both "/*" or "all" 
depending on the original privilege)

> Revoking SELECT or INSERT from parent privilege does not get applied in Impala
> ------------------------------------------------------------------------------
>
>                 Key: SENTRY-2202
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2202
>             Project: Sentry
>          Issue Type: Bug
>          Components: Sentry
>    Affects Versions: 2.1.0
>            Reporter: Arjun Mishra
>            Assignee: Arjun Mishra
>            Priority: Major
>             Fix For: 2.1.0
>
>
> When revoking select or insert from privilege should be applied to chid priv. 
> For eg if there is ALL on table and SELECT on database and SELECT is revoked 
> from database, then table privileges should be changed to INSERT. This is not 
> happening in Impala because when looking for child privilege we only filter 
> by "//*" as opposed to both "//*" or "all" depending on the original privilege



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to