[SENTRY-1308] Generic Model is not consistent with role checking

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.8.0
• Component/s: Service
• Assignee: Unassigned
• Reporter: Gregory Chanan
• Created: 02/Jun/16 00:39
• Updated: 03/Jun/16 22:45

Description

Roles are sometimes checked not in privilege commands:

List: not checked
Grant: checked
Revoke: checked

For consistency, I would argue they should always be checked. One counter argument could be that not checking is valid if an empty set of privileges are returned for list, but given you can't grant a privilege on a role that doesn't exist, this isn't interesting.