[RANGER-4638] Multiple Columns Revoke not generating policies with correct number of columns

• Type: Bug
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.0.0
• Component/s: Ranger
• Assignee: Ramesh Mani
• Reporter: Ramesh Mani
• Created: 08/Jan/24 18:30
• Updated: 15/Aug/24 23:56

Description

Multiple Columns Revoke not generating policies with correct number of columns. E.G

When  " revoke select(col1, col2,col3) on table demo.test from role Role3;" is done, the generate policies is not revoking the columns. Currently revoke  statement is only revoking if the is only one column.

Testing to done"

Impala / Hive beeline.

1) "grant select(col1, col2, col3)  on table demo.test  to role Role1" 

     "revoke select(col1, col2, col3) on table demo.test from role Role1"

2) "grant select(col1, col2, col3, col4)  on table demo.test  to role Role1" 

      "revoke select(col1, col2, col3) on table demo.test from role Role1"

HBASE shell

grant 'nifi', 'RWXCA', 'test'

revoke 'nifi', 'test'

 

Issue Links

• is required by: IMPALA-12554 Create only one Ranger policy for GRANT statement
• relates to: RANGER-4585 Support multiple columns policy creation in ranger for Grant / Revoke request
• links to: Review Request
• links to: Test Cases