[ 
https://issues.apache.org/jira/browse/SENTRY-2202?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16439544#comment-16439544
 ] 

Sergio Peña commented on SENTRY-2202:
-------------------------------------

I think we should remove the decomposition behavior and treat ALL and * as 
another privilege that should be revoked in order to grant or revoke other 
individual privileges, at least until we have every single privilege supported 
in SQL.

 

[~akolb] [~kkalyan] What do you think about this?

> Revoking SELECT or INSERT from parent privilege does not get applied in Impala
> ------------------------------------------------------------------------------
>
>                 Key: SENTRY-2202
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2202
>             Project: Sentry
>          Issue Type: Bug
>          Components: Sentry
>    Affects Versions: 2.1.0
>            Reporter: Arjun Mishra
>            Assignee: Arjun Mishra
>            Priority: Major
>             Fix For: 2.1.0
>
>
> When revoking select or insert from privilege, child privilege should be 
> appropriately updated. For eg if there is ALL on table and SELECT on database 
> and SELECT is revoked from database, then table privileges should be changed 
> from ALL to INSERT. This is not happening in Impala because when looking for 
> child privilege we only filter by "\*" as opposed to both "\*" or "all" 
> depending on the original privilege



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to