[ https://issues.apache.org/jira/browse/RANGER-4716?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
suja s updated RANGER-4716: --------------------------- Description: On validation with RANGER-4585 fix, STEPS TO REPRODUCE: >From impala-shell Perform grant command execution with set of columns c1,c2 for table t1 for user u1 Perform revoke command execution on table t1 for user u1 CURRENT BEHAVIOUR: Revoke execution is shown as successful but ranger policy is not updated tp remove the user from policy for [db/table] EXPECTED BEHAVIOUR: Revoke on table should be able to update the ranger policy to remove user permissions was: On validation with RANGER-4585 fix, When grant command is invoked separately for different users, even though it is for same resource and same set of permissions, different policies are created >From impala-shell Perform grant command execution with set of columns c1,c2 for table t1 for user u1 Perform grant command execution with set of columns c1,c2 for table t1 for user u2 This creates 2 policies even though resources and access types are same > Revoke on table doesnot update ranger policy if grant was executed on > specific columns of table > ----------------------------------------------------------------------------------------------- > > Key: RANGER-4716 > URL: https://issues.apache.org/jira/browse/RANGER-4716 > Project: Ranger > Issue Type: Bug > Components: Ranger > Reporter: suja s > Priority: Major > > On validation with RANGER-4585 fix, > STEPS TO REPRODUCE: > From impala-shell > Perform grant command execution with set of columns c1,c2 for table t1 for > user u1 > Perform revoke command execution on table t1 for user u1 > CURRENT BEHAVIOUR: > Revoke execution is shown as successful but ranger policy is not updated tp > remove the user from policy for [db/table] > EXPECTED BEHAVIOUR: > Revoke on table should be able to update the ranger policy to remove user > permissions -- This message was sent by Atlassian Jira (v8.20.10#820010)