You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@sentry.apache.org by "Gregory Chanan (JIRA)" <ji...@apache.org> on 2016/06/03 22:45:59 UTC

[jira] [Updated] (SENTRY-1308) Generic Model is not consistent with role checking

     [ https://issues.apache.org/jira/browse/SENTRY-1308?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gregory Chanan updated SENTRY-1308:
-----------------------------------
    Summary: Generic Model is not consistent with role checking  (was: Generic Model is consistent with role checking)

> Generic Model is not consistent with role checking
> --------------------------------------------------
>
>                 Key: SENTRY-1308
>                 URL: https://issues.apache.org/jira/browse/SENTRY-1308
>             Project: Sentry
>          Issue Type: Bug
>          Components: Service
>    Affects Versions: 1.8.0
>            Reporter: Gregory Chanan
>         Attachments: SENTRY-1308.patch
>
>
> Roles are sometimes checked not in privilege commands:
> List: not checked
> Grant: checked
> Revoke: checked
> For consistency, I would argue they should always be checked.  One counter argument could be that not checking is valid if an empty set of privileges are returned for list, but given you can't grant a privilege on a role that doesn't exist, this isn't interesting.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)