Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
-
ghx-label-4
Description
REVOKE GRANT OPTION FOR SELECT ON DATABASE DB FROM USER USR;
In Ranger, it is not possible to REVOKE GRANT OPTION for a specific privilege (SELECT). The GRANT OPTION must be revoked for the entire DATABASE DB resource. The Impala grammar should be updated to support omitting the FOR SELECT if the authorization provider is set to Ranger. If that grammar is used for Sentry, it should throw an exception.