[SENTRY-2473] Add new sentrystore API to remove permission information associated to a list of authorizables

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Krishna Kalyan
• Created: 04/Dec/18 17:48
• Updated: 07/Dec/18 15:44

Description

Permission information include permissions granted on the authorizables and the roles that have been granted with these privileges along with the the groups associated to those roles.

Here is what we should be doing.

1. Identify all the permissions granted to provided authorizables.
2. Identify all the roles which were granted to the above identified privileges.
3. Remove all the privileges.
4. Reset all the Role⇔Group mapping from the roles identified in step-b
5. Remove the roles that are not associated with any privilege and a group.

Issue Links

• blocks: SENTRY-2479 Avoid exporting/importing privileges that are were asked to be excluded
• is depended upon by: SENTRY-2447 Import sentry permission information
• is depended upon by: SENTRY-2474 Update sentry permissions from the import file