Revoke actions on entities will wait for the cache to take effect, this should happen immediately.
Steps to reproduce:
1. Have a user without any privilege to any namespace
2. Grant the user action ADMIN on instance:cdap
3. Wait the cache to take effect, he will be able to list namespaces and all entities in the namespace.
4. Revoke the action on instance:cdap
5. It will take several minutes to let revoke take effect due to the cache. And user will not be able to list namespaces