Impala Public Jenkins has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/13450 )
Change subject: IMPALA-8588: Fix revoke grant option with Ranger ...................................................................... IMPALA-8588: Fix revoke grant option with Ranger Previously, the REVOKE GRANT OPTION type statements would not only revoke the grant option, but also the privilege as well. The behavior has been updated to only revoke the grant option. In Ranger UI, this is seen as the delegate admin option. Examples: REVOKE SELECT ON DATABASE <database> FROM USER <user> This will revoke the SELECT privilege on the database resource, but if there are other privileges on that resource the grant option will remain for those privileges. REVOKE GRANT OPTION FOR SELECT ON DATABASE <database> FROM USER <user> This will revoke the grant option for all privileges on this database resource. It will not revoke the SELECT privilege on the resource. Testing: - Ran all FE tests - Ran all E2E tests - Updated test_ranger to test behavior for when REVOKE GRANT OPTION statements are submitted. Change-Id: Iddfccb442c3be3c266dbc2d8ae85c5674c534d7c Reviewed-on: http://gerrit.cloudera.org:8080/13450 Reviewed-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com> Tested-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com> --- M fe/src/main/java/org/apache/impala/authorization/ranger/RangerCatalogdAuthorizationManager.java M fe/src/test/java/org/apache/impala/authorization/AuthorizationTestBase.java M tests/authorization/test_ranger.py 3 files changed, 47 insertions(+), 26 deletions(-) Approvals: Impala Public Jenkins: Looks good to me, approved; Verified -- To view, visit http://gerrit.cloudera.org:8080/13450 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: Iddfccb442c3be3c266dbc2d8ae85c5674c534d7c Gerrit-Change-Number: 13450 Gerrit-PatchSet: 5 Gerrit-Owner: Austin Nobis <ano...@cloudera.com> Gerrit-Reviewer: Austin Nobis <ano...@cloudera.com> Gerrit-Reviewer: Fredy Wijaya <fwij...@cloudera.com> Gerrit-Reviewer: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
