[jira] [Updated] (SENTRY-552) Sentry Store recursive revoke of privilege levels < ALL does not properly downgrade child privileges

["Lenni Kuff (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SENTRY-552?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Lenni Kuff updated SENTRY-552:
------------------------------
    Summary: Sentry Store recursive revoke of privilege levels < ALL does not properly downgrade child privileges  (was: Sentry Store recursive revoke of privilege levels < ALL does not properly downgrade child privileges (they are removed))

> Sentry Store recursive revoke of privilege levels < ALL does not properly downgrade child privileges
> ----------------------------------------------------------------------------------------------------
>
>                 Key: SENTRY-552
>                 URL: https://issues.apache.org/jira/browse/SENTRY-552
>             Project: Sentry
>          Issue Type: Bug
>    Affects Versions: 1.5.0
>            Reporter: Lenni Kuff
>            Assignee: Dapeng Sun
>             Fix For: 1.5.0
>
>         Attachments: SENTRY-552.002.patch, SENTRY-552.003.patch, SENTRY-552.004.patch, SENTRY-552.005.patch, SENTRY-552.patch
>
>
> The following doesn't work properly:
> grant all on col1
> grant all on col2
> revoke select on col2
> -- at this point, will have ALL on col1, INSERT on col2
> revoke INSERT from table <--- Does not do the proper thing.
> The expectation is that revoking INSERT from the table would remove INSERT privilege on col2 and also downgrade the ALL privilege on col1 to SELECT. Instead it removes the ALL privilege. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)