[RANGER-2448] Policy update is adding user/group to 'Exclude from Deny Conditions' - Grant from Beeline / Impala-shell

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: plugins, Ranger
• Assignee: Unassigned
• Reporter: Mahendra Korepu
• Created: 23/May/19 19:11
• Updated: 23/May/19 19:12

Description

Steps to Reproduce the issue:

• Use Beeline (hive ) or Impala-shell (Impala) :

1.  Grant a privilege to a user on db / table.
2. Now revoke the same privilege from step1.
3. Now grant privilege again from step1.

After step 3 . if you login to Ranger UI used is added to both allow conditions and  Deny Conditions. which is not the case the first time after step1.

This behavior is same in Hive and Impala with Ranger , seems like a Ranger plugin issue.