Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-1090

Revoke command with grant option does not disable delegated admin permission for users/groups in the corresponding policy

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 0.6.0
    • 0.7.0, 0.6.3
    • Ranger
    • None

    Description

      Pre-requisites Steps :
      Install Ranger, Hive Component and enable Ranger for Hive component.

      Steps to Reproduce:
      Execute grant command(with grant option) in hive; at Ranger end it will create policy with corresponds details specified in the grant command like resources, permission, users, groups and also enables delegatedAdmin permission(set to true).
      Sample : grant select, UPDATE ON TABLE xatestgr.testtable to USER user1 with grant option;
      Now execute revoke command with 'revoke grant option' from hive; at Ranger end it will update policy with correct info as specified in the revoke command like resources, users/groups, access permissions but it does not change delegatedAdmin permission(back to false)
      Sample : revoke grant option for select, create, update, drop ON TABLE xatestgr.testtable FROM USER user1;

      Expected behaviour :
      When run revoke command with 'revoke grant option' it should change delegated admin permission.

      Attachments

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            pradeep Pradeep Agrawal
            pradeep Pradeep Agrawal
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment