[jira] [Created] (SENTRY-302) Partial revoke on Table fails if both ALL and a SELECT/INSERT grant exists

["Arun Suresh (JIRA)" <ji...@apache.org>]

Arun Suresh created SENTRY-302:
----------------------------------

             Summary: Partial revoke on Table fails if both ALL and a SELECT/INSERT grant exists
                 Key: SENTRY-302
                 URL: https://issues.apache.org/jira/browse/SENTRY-302
             Project: Sentry
          Issue Type: Bug
            Reporter: Arun Suresh
            Assignee: Arun Suresh
             Fix For: 1.4.0


Test case to show when revoke does not work :
{noformat}
1. Create 1 Role (user_role & user_role2)
2. Create a Table t1
3. grant ALL on t1 to user_role
4. grant INSERT on t1 to user_role1
5. Revoke INSERT on t1 from user_role
     - This would imply user_role can still SELECT
     - But user_role should NOT be allowed to LOAD
6. Observed that INSERT is still allowed on table
{noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)