[jira] [Commented] (SENTRY-299) Partial Revoke Fails under certain conditions

["Arun Suresh (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SENTRY-299?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14030031#comment-14030031 ] 

Arun Suresh commented on SENTRY-299:
------------------------------------

[SENTRY-281|https://issues.apache.org/jira/browse/SENTRY-281] handles this issue

> Partial Revoke Fails under certain conditions
> ---------------------------------------------
>
>                 Key: SENTRY-299
>                 URL: https://issues.apache.org/jira/browse/SENTRY-299
>             Project: Sentry
>          Issue Type: Bug
>            Reporter: Arun Suresh
>            Assignee: Arun Suresh
>              Labels: grant/revoke
>         Attachments: SENTRY-299.test.patch
>
>
> {noformat}
> 1. Create 2 Roles (user_role & user_role2)
> 2. Create a Table t1
> 3. grant ALL on t1 to user_role
> 4. grant INSERT on t1 to user_role2
> 5. Revoke INSERT on t1 from user_role
>      - This would imply user_role can still SELECT
>      - But user_role should NOT be allowed to LOAD
> 6. Presense of another role will cause the partial revoke
>     to fail and user_role will still be able to LOAD
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)