[ 
https://issues.apache.org/jira/browse/SENTRY-2202?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16439605#comment-16439605
 ] 

Na Li commented on SENTRY-2202:
-------------------------------

[~arjunmishra13][~spena] when user revoke "select", "insert" or other single 
prvilege, but current privilege is "all", the revoke should fail. The "all" 
privilege should remain. 

> Revoking SELECT or INSERT from parent privilege does not get applied in Impala
> ------------------------------------------------------------------------------
>
>                 Key: SENTRY-2202
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2202
>             Project: Sentry
>          Issue Type: Bug
>          Components: Sentry
>    Affects Versions: 2.1.0
>            Reporter: Arjun Mishra
>            Assignee: Arjun Mishra
>            Priority: Major
>             Fix For: 2.1.0
>
>
> When revoking select or insert from privilege, child privilege should be 
> appropriately updated. For eg if there is ALL on table and SELECT on database 
> and SELECT is revoked from database, then table privileges should be changed 
> from ALL to INSERT. This is not happening in Impala because when looking for 
> child privilege we only filter by "\*" as opposed to both "\*" or "all" 
> depending on the original privilege



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to