[SENTRY-268] Allow only granted roles to be set in "SET ROLE <roleName>"

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.4.0
• Fix Version/s: 1.4.0
• Labels: grant/revoke
• Assignee: Unassigned
• Reporter: Sravya Tirukkovalur
• Created: 06/Jun/14 21:54
• Updated: 23/Jun/14 00:22
• Resolved: 23/Jun/14 00:22

Description

This is related to https://issues.apache.org/jira/browse/SENTRY-240. Currently we allow any role to be set, but when authorizing we make an intersection of current active roles and granted privileges. Instead it would be better to restrict setting roles which a user is not granted.

Issue Links

• duplicates: SENTRY-305 SHOW CURRENT ROLES shouldn't require admin privileges