[SENTRY-552] Sentry Store recursive revoke of privilege levels < ALL does not properly downgrade child privileges

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.0
• Fix Version/s: 1.5.0
• Assignee: Dapeng Sun
• Reporter: Lenni Kuff
• Created: 27/Nov/14 02:21
• Updated: 03/Dec/14 01:19
• Resolved: 02/Dec/14 08:38

Description

The following doesn't work properly:

grant all on col1
grant all on col2
revoke select on col2
– at this point, will have ALL on col1, INSERT on col2
revoke INSERT from table <--- Does not do the proper thing.

The expectation is that revoking INSERT from the table would remove INSERT privilege on col2 and also downgrade the ALL privilege on col1 to SELECT. Instead it removes the ALL privilege.

Issue Links

• is duplicated by: SENTRY-543 Sentry Store permission dump incorrect after recursive revoke
• links to: review board