[SENTRY-281] Revoking a parent privilege should revoke all child privileges

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.0
• Fix Version/s: 1.4.0
• Labels: grant/revoke
• Assignee: Arun Suresh
• Reporter: Sravya Tirukkovalur
• Created: 10/Jun/14 01:33
• Updated: 20/Nov/18 17:43
• Resolved: 18/Jun/14 20:22

Description

GRANT SELECT on DATABASE db1 to ROLE role1;
REVOKE ALL on SERVER server1 from ROLE role1;

Should result in zero privileges for role1

Issue Links

• blocks: SENTRY-303 Allow users to grant/revoke SELECT/INSERT to ALL tables in a Database
• incorporates: SENTRY-299 Partial Revoke Fails under certain conditions
• incorporates: SENTRY-302 Partial revoke on Table fails if both ALL and a SELECT/INSERT grant exists
• incorporates: SENTRY-2463 Revoking ALL or * should revoke any other privilege on the entity
• is duplicated by: SENTRY-299 Partial Revoke Fails under certain conditions
• is duplicated by: SENTRY-302 Partial revoke on Table fails if both ALL and a SELECT/INSERT grant exists
• is duplicated by: SENTRY-306 Fix grant all on table in db based provider
• links to: Review Request