Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-4677

grantor and grant option not correctly populated in response of "show role grant" command

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • Ranger
    • None

    Description

      PROBLEM STATEMENT:
      Response from "show role grant user {user_name}" is not returning correct grantor and grant_option in response.

      STEPS TO REPRODUCE:
      1. Kinit as "admin" user and then login to beeline.

      2. Create role "some_new_role" from beeline using the command

      create role some_new_role;

      3. Then grant that role to "user_1" using following command

      grant role some_new_role to user user_1 with admin option;

      4. Then exit from beeline. And kinit as "user_1" and login to beeline.

      5. Then grant the role "some_new_role" to "user_2" using following command

      grant role some_new_role to user user_2 with admin option;

      6. Then exit from beeline. And kinit as "user_2" and login to beeline.

      7. Then run the following command to get the role grant for user "user_2".

      show role grant user user_2; 

      Then the result of the above command looks like:

      +----------------+---------------+----------------+----------+
      |      role      | grant_option  |   grant_time   | grantor  |
      +----------------+---------------+----------------+----------+
      | some_new_role  | false         | 1696326074000  | admin    |
      +----------------+---------------+----------------+----------+ 

      CURRENT BEHAVIOUR:

      The role "some_new_role" is granted to "user_2" by "user_1" with admin option but as we can see in the response above has grant_option "false" and grantor as "admin" instead of "grant_option" true and grantor as "user_1".

      EXPECTED BEHAVIOUR:
      In the above response for role grant command for user user_2 the grant_option should be "true" and the grantor will be "user_1".

      IMPACT:
      Not able to get correct grantor and grant_option for a role grant to a user.

      Attachments

        Activity

          People

            Unassigned Unassigned
            kundan.jha Kundan Kumar Jha
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: