[jira] [Commented] (SENTRY-302) Partial revoke on Table fails if both ALL and a SELECT/INSERT grant exists

["Arun Suresh (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SENTRY-302?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14030802#comment-14030802 ] 

Arun Suresh commented on SENTRY-302:
------------------------------------

The patch for [SENTRY-281|https://issues.apache.org/jira/browse/SENTRY-281] handles this issue

> Partial revoke on Table fails if both ALL and a SELECT/INSERT grant exists
> --------------------------------------------------------------------------
>
>                 Key: SENTRY-302
>                 URL: https://issues.apache.org/jira/browse/SENTRY-302
>             Project: Sentry
>          Issue Type: Bug
>            Reporter: Arun Suresh
>            Assignee: Arun Suresh
>              Labels: grant/revoke
>             Fix For: 1.4.0
>
>         Attachments: SENTRY-302.test.patch
>
>
> Test case to show when revoke does not work :
> {noformat}
> 1. Create 1 Role (user_role & user_role2)
> 2. Create a Table t1
> 3. grant ALL on t1 to user_role
> 4. grant INSERT on t1 to user_role1
> 5. Revoke INSERT on t1 from user_role
>      - This would imply user_role can still SELECT
>      - But user_role should NOT be allowed to LOAD
> 6. Observed that INSERT is still allowed on table
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)