[SENTRY-299] Partial Revoke Fails under certain conditions

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Fix Version/s: 1.4.0
• Labels: grant/revoke
• Assignee: Arun Suresh
• Reporter: Arun Suresh
• Created: 12/Jun/14 23:45
• Updated: 19/Jun/14 02:16
• Resolved: 19/Jun/14 02:16

Description

1. Create 2 Roles (user_role & user_role2)
2. Create a Table t1
3. grant ALL on t1 to user_role
4. grant INSERT on t1 to user_role2
5. Revoke INSERT on t1 from user_role
     - This would imply user_role can still SELECT
     - But user_role should NOT be allowed to LOAD
6. Presense of another role will cause the partial revoke
    to fail and user_role will still be able to LOAD

Issue Links

• duplicates: SENTRY-281 Revoking a parent privilege should revoke all child privileges
• is part of: SENTRY-281 Revoking a parent privilege should revoke all child privileges