You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sentry.apache.org by "Lenni Kuff (JIRA)" <ji...@apache.org> on 2015/08/11 02:31:45 UTC
[jira] [Commented] (SENTRY-841) Revoke on SERVER scope breaks
Client API, allows any string to be passed in
[ https://issues.apache.org/jira/browse/SENTRY-841?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14681013#comment-14681013 ]
Lenni Kuff commented on SENTRY-841:
-----------------------------------
This was introduced by SENTRY-827.
> Revoke on SERVER scope breaks Client API, allows any string to be passed in
> ---------------------------------------------------------------------------
>
> Key: SENTRY-841
> URL: https://issues.apache.org/jira/browse/SENTRY-841
> Project: Sentry
> Issue Type: Bug
> Components: Service
> Affects Versions: 1.6.0
> Reporter: Lenni Kuff
>
> Revoke on server scope change the Java API in an incompatible way (added a new parameter). We need to fix the client API to have an overload for revoke which defaults to "ALL" privileges if nothing is specified.
> Additionally, it looks like any string can be passed in for the "action" field of the new API. We should validate that the action is valid - "SELECT", "INSERT", or "ALL".
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)