Dimitris Tsirogiannis
5cae398a48
IMPALA-3133: Wrong privileges after a REVOKE ALL ON SERVER statement
...
This commit fixes an issue where a GRANT ALL ON SERVER to role_name statement
followed by a REVOKE ALL ON SERVER from role_name statement would not revoke all
privileges from role_name. The problem was triggered by a specific
combination of Sentry client API calls used in Impala during
grant/revoke statements at server scope. In particular, during GRANT, Impala was using
an API call that didn't explicitly specify the privilege action (Sentry uses '*' if
no action is specified). In contrast, the corresponding REVOKE call was explicitly
specifying the privilege action to be 'ALL'. Sentry doesn't seem to
handle this case correctly, thereby failing to remove all the privileges
after a REVOKE ALL ON SERVER call. The fix from the Impala side, that
results in the correct behavior, is to always specify the privilege
action by using the appropriate API calls.
Change-Id: I6b3a0d10f5e88c6a0a10bd20f620562d2de7ab25
Reviewed-on: http://gerrit.cloudera.org:8080/2979
Reviewed-by: Dimitris Tsirogiannis <dtsirogiannis@cloudera.com >
Tested-by: Internal Jenkins
2016-05-12 14:17:57 -07:00
..
2015-09-23 11:07:42 -07:00
2016-02-18 01:25:10 -08:00
2016-05-12 14:17:39 -07:00
2016-02-10 00:54:11 +00:00
2016-05-12 14:17:46 -07:00
2014-09-26 16:56:40 -07:00
2016-02-17 20:22:14 -08:00
2016-01-14 06:04:48 +00:00
2014-09-26 12:28:03 -07:00
2014-09-26 12:24:07 -07:00
2015-03-07 09:51:27 +00:00
2016-05-12 14:17:50 -07:00
2016-05-12 14:17:50 -07:00
2016-05-12 14:17:50 -07:00
2015-04-21 19:27:50 +00:00
2016-05-12 14:17:50 -07:00
2016-05-12 14:17:50 -07:00
2015-06-01 16:51:53 -07:00
2016-02-24 13:31:00 -08:00
2016-05-12 14:17:46 -07:00
2016-01-14 05:45:22 +00:00
2014-05-16 22:26:11 -07:00
2016-02-11 02:32:22 +00:00
2015-08-22 01:46:26 +00:00
2015-08-22 01:46:26 +00:00
2016-01-13 12:37:32 +00:00
2015-11-09 21:13:38 +00:00
2015-07-16 19:38:17 +00:00
2016-02-19 00:03:15 -08:00
2016-01-27 20:41:45 +00:00
2016-03-02 23:23:04 -08:00
2014-06-11 03:10:11 -07:00
2014-06-11 03:10:11 -07:00
2014-06-11 03:10:11 -07:00
2014-06-11 03:10:11 -07:00
2016-05-12 14:17:32 -07:00
2016-02-19 23:04:03 -08:00
2016-05-12 14:17:57 -07:00
2015-02-23 23:32:41 +00:00
2016-02-02 21:55:57 +00:00
2014-05-08 13:59:00 -07:00
2015-02-23 23:32:41 +00:00
2015-08-22 01:46:26 +00:00
2015-02-23 23:32:41 +00:00
2015-02-23 23:32:41 +00:00
2014-06-24 02:14:27 -07:00
2015-02-23 23:32:41 +00:00
2015-02-23 23:32:41 +00:00
2014-01-08 10:52:36 -08:00
2015-02-23 23:32:41 +00:00
2015-04-21 19:27:50 +00:00
2016-02-02 21:55:57 +00:00
2015-10-12 14:41:00 -07:00
2014-06-24 02:14:27 -07:00
2016-05-12 14:17:46 -07:00
2016-02-19 00:03:15 -08:00
2014-01-08 10:52:14 -08:00
2015-04-23 19:46:31 +00:00
2014-01-08 10:46:49 -08:00
2016-02-19 00:03:15 -08:00
2015-10-07 14:47:40 -07:00
2015-08-22 01:46:26 +00:00
2014-01-08 10:53:51 -08:00
2015-05-27 22:25:12 +00:00
2014-12-02 18:08:09 -08:00
2016-05-12 14:17:49 -07:00
2016-05-12 14:17:47 -07:00
2016-02-19 00:03:15 -08:00
2016-05-12 14:17:41 -07:00
2015-02-23 23:32:41 +00:00
2015-10-12 14:41:05 -07:00
2016-01-14 05:45:22 +00:00
2015-09-03 16:44:10 -07:00
2016-03-11 11:37:58 -08:00
2016-03-29 23:57:54 +00:00
2016-05-12 14:17:34 -07:00
2016-01-28 21:49:39 -08:00
2015-09-16 16:43:47 -07:00
2016-05-12 14:17:39 -07:00
2015-09-10 04:50:31 +00:00
2016-05-12 14:17:29 -07:00
2015-02-23 23:32:41 +00:00
2016-02-19 23:04:03 -08:00
2015-06-05 00:52:14 +00:00
2015-02-27 18:48:56 +00:00
2015-10-05 11:30:54 -07:00
2016-01-05 06:04:41 +00:00
2014-01-08 10:48:09 -08:00
2016-05-12 14:17:49 -07:00
2016-03-02 23:23:05 -08:00
2015-09-02 19:23:54 +00:00
2015-09-02 19:23:54 +00:00
2016-04-01 05:06:38 +00:00
2015-09-02 19:23:54 +00:00
2015-09-02 19:23:54 +00:00
2016-01-27 20:41:45 +00:00
2016-02-18 01:25:10 -08:00
2015-10-07 14:47:40 -07:00
2015-08-22 01:46:26 +00:00
2016-02-10 07:16:58 +00:00
2014-05-08 12:28:53 -07:00
2016-05-12 14:17:48 -07:00
2016-05-12 14:17:48 -07:00
2016-05-12 14:17:38 -07:00
2016-03-25 13:10:15 +00:00
2015-09-08 19:57:55 +00:00
2016-05-12 14:17:46 -07:00
2016-05-12 14:17:46 -07:00
2016-05-12 14:17:46 -07:00
2016-05-12 14:17:46 -07:00
2014-06-24 02:14:27 -07:00
2015-09-27 15:13:32 -07:00
2015-09-27 15:13:32 -07:00
2014-11-19 17:21:36 -08:00
2016-05-12 14:17:31 -07:00
2016-01-20 04:32:21 +00:00
2015-03-03 08:29:13 +00:00
2015-07-16 19:38:17 +00:00
2016-01-10 23:22:44 +00:00
2016-05-12 14:17:36 -07:00
2016-01-26 03:13:05 +00:00
2016-03-10 23:16:29 +00:00
2014-09-05 10:12:55 -07:00
2016-05-12 14:17:55 -07:00
2015-09-27 15:13:28 -07:00
2016-02-04 01:06:03 +00:00
2014-01-08 10:52:02 -08:00
2016-02-28 21:31:37 -08:00
2014-09-26 12:28:03 -07:00
2016-05-12 14:17:45 -07:00
2016-05-12 14:17:49 -07:00
2015-03-11 16:39:39 -07:00
2015-08-19 04:37:39 +00:00
2015-03-11 16:39:39 -07:00
2014-06-12 02:23:20 -07:00
2015-03-11 16:39:39 -07:00
2015-10-01 13:58:40 -07:00
2016-02-06 05:28:28 +00:00
2014-01-08 10:48:09 -08:00
2016-01-23 23:59:27 +00:00
2014-09-18 00:36:03 -07:00
2016-03-15 12:10:33 +00:00
2014-06-20 13:35:10 -07:00
2014-01-08 10:54:01 -08:00
2015-10-07 14:47:40 -07:00