Hello Fredy Wijaya, Impala Public Jenkins, I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/13450 to look at the new patch set (#2). Change subject: IMPALA-8588: Fix revoke grant option with Ranger ...................................................................... IMPALA-8588: Fix revoke grant option with Ranger Previously, the REVOKE GRANT OPTION type statements would not only revoke the grant option, but also the privilege as well. The behavior has been updated to only revoke the grant option. In Ranger UI, this is seen as the delegate admin option. Examples: REVOKE SELECT ON DATABASE <database> FROM USER <user> This will revoke the SELECT privilege on the database resource, but if there are other privileges on that resource the grant option will remain for those privileges. REVOKE GRANT OPTION FOR SELECT ON DATABASE <database> FROM USER <user> This will revoke the grant option for all privileges on this database resource. It will not revoke the SELECT privilege on the resource. Testing: - Ran all FE tests - Ran all E2E tests - Updated test_ranger to test behavior for when REVOKE GRANT OPTION statements are submitted. Change-Id: Iddfccb442c3be3c266dbc2d8ae85c5674c534d7c --- M fe/src/main/java/org/apache/impala/authorization/ranger/RangerCatalogdAuthorizationManager.java M fe/src/test/java/org/apache/impala/authorization/AuthorizationTestBase.java M tests/authorization/test_ranger.py 3 files changed, 47 insertions(+), 26 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/50/13450/2 -- To view, visit http://gerrit.cloudera.org:8080/13450 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newpatchset Gerrit-Change-Id: Iddfccb442c3be3c266dbc2d8ae85c5674c534d7c Gerrit-Change-Number: 13450 Gerrit-PatchSet: 2 Gerrit-Owner: Austin Nobis <ano...@cloudera.com> Gerrit-Reviewer: Austin Nobis <ano...@cloudera.com> Gerrit-Reviewer: Fredy Wijaya <fwij...@cloudera.com> Gerrit-Reviewer: Impala Public Jenkins <impala-public-jenk...@cloudera.com>