sentry-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Sergio Peña (JIRA) <j...@apache.org>
Subject [jira] [Updated] (SENTRY-2315) The grant all operation is not dropping the create/alter/drop/index/lock privileges.
Date Tue, 04 Sep 2018 18:57:00 GMT

     [ https://issues.apache.org/jira/browse/SENTRY-2315?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Sergio Peña updated SENTRY-2315:
--------------------------------
    Attachment: SENTRY-2315.2.patch

> The grant all operation is not dropping the create/alter/drop/index/lock privileges.
> ------------------------------------------------------------------------------------
>
>                 Key: SENTRY-2315
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2315
>             Project: Sentry
>          Issue Type: Bug
>          Components: Sentry
>    Affects Versions: 2.1.0
>            Reporter: Sergio Peña
>            Assignee: Sergio Peña
>            Priority: Major
>         Attachments: SENTRY-2315.1.patch, SENTRY-2315.2.patch
>
>
> When an object has the ALL privilege, any individual privilege explicitly granted (i.e.
create, select, insert, ...) after that has no effect on the privilege list because ALL implies
the role or user has all those privileges.
> However, when any of the new privileges list (create, alter, drop) is granted before,
and then the grant ALL happens, those privileges are not removed. We should keep the GRANT
ALL consistent and remove any individual privilege (except the OWNER privilege) from the list. 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message