[ https://issues.apache.org/jira/browse/SENTRY-2202?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16439605#comment-16439605 ]
Na Li commented on SENTRY-2202: ------------------------------- [~arjunmishra13][~spena] when user revoke "select", "insert" or other single prvilege, but current privilege is "all", the revoke should fail. The "all" privilege should remain. > Revoking SELECT or INSERT from parent privilege does not get applied in Impala > ------------------------------------------------------------------------------ > > Key: SENTRY-2202 > URL: https://issues.apache.org/jira/browse/SENTRY-2202 > Project: Sentry > Issue Type: Bug > Components: Sentry > Affects Versions: 2.1.0 > Reporter: Arjun Mishra > Assignee: Arjun Mishra > Priority: Major > Fix For: 2.1.0 > > > When revoking select or insert from privilege, child privilege should be > appropriately updated. For eg if there is ALL on table and SELECT on database > and SELECT is revoked from database, then table privileges should be changed > from ALL to INSERT. This is not happening in Impala because when looking for > child privilege we only filter by "\*" as opposed to both "\*" or "all" > depending on the original privilege -- This message was sent by Atlassian JIRA (v7.6.3#76005)