[SENTRY-302] Partial revoke on Table fails if both ALL and a SELECT/INSERT grant exists

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Fix Version/s: 1.4.0
• Labels: grant/revoke
• Assignee: Arun Suresh
• Reporter: Arun Suresh
• Created: 13/Jun/14 16:12
• Updated: 19/Jun/14 02:16
• Resolved: 19/Jun/14 02:16

Description

Test case to show when revoke does not work :

1. Create 1 Role (user_role & user_role2)
2. Create a Table t1
3. grant ALL on t1 to user_role
4. grant INSERT on t1 to user_role1
5. Revoke INSERT on t1 from user_role
     - This would imply user_role can still SELECT
     - But user_role should NOT be allowed to LOAD
6. Observed that INSERT is still allowed on table

Issue Links

• duplicates: SENTRY-281 Revoking a parent privilege should revoke all child privileges
• is part of: SENTRY-281 Revoking a parent privilege should revoke all child privileges