Uploaded image for project: 'Sentry'
  1. Sentry
  2. SENTRY-552

Sentry Store recursive revoke of privilege levels < ALL does not properly downgrade child privileges

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.5.0
    • Fix Version/s: 1.5.0
    • Component/s: None
    • Labels:
      None

      Description

      The following doesn't work properly:

      grant all on col1
      grant all on col2
      revoke select on col2
      – at this point, will have ALL on col1, INSERT on col2
      revoke INSERT from table <--- Does not do the proper thing.

      The expectation is that revoking INSERT from the table would remove INSERT privilege on col2 and also downgrade the ALL privilege on col1 to SELECT. Instead it removes the ALL privilege.

        Attachments

        1. SENTRY-552.005.patch
          16 kB
          Dapeng Sun
        2. SENTRY-552.004.patch
          16 kB
          Dapeng Sun
        3. SENTRY-552.003.patch
          12 kB
          Dapeng Sun
        4. SENTRY-552.002.patch
          9 kB
          Dapeng Sun
        5. SENTRY-552.patch
          5 kB
          Dapeng Sun

          Issue Links

            Activity

              People

              • Assignee:
                dapengsun Dapeng Sun
                Reporter:
                lskuff Lenni Kuff
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: