accumulo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Christopher Tubbs (JIRA)" <>
Subject [jira] [Commented] (ACCUMULO-677) Remove (deprecate) createUser call with authorizations argument
Date Mon, 30 Jul 2012 15:29:34 GMT


Christopher Tubbs commented on ACCUMULO-677:

Why should they depend on a different ACL? Grant/Revoke was intended to be an "ALTER USER"
ACL, whereas Create User was intended to be a "CREATE USER" ACL, and this would *include*
creating the initial authorizations. When you view separate it as "CREATE" and "ALTER" on
the object "USER", it makes complete sense in an object oriented way. Separating them makes
less sense, because it treats "CREATE USER" and "ALTER USER" as two completely independent
actions, completely ignoring the common object you are manipulating ("USER").

If you implemented the above, then to create a fully functioning user, you'd have to have
two separate permissions. I understand the desire to change the API to match this paradigm,
if you were to desire to switch to it, but I personally think that leaving the "CREATE USER"
and "ALTER USER" paradigm in place is better. That said... without deprecating or changing
the "CREATE"/"ALTER" paradigm, you could add to the API a method to create a user without
authorizations (unless that already exists).
> Remove (deprecate) createUser call with authorizations argument
> ---------------------------------------------------------------
>                 Key: ACCUMULO-677
>                 URL:
>             Project: Accumulo
>          Issue Type: Bug
>          Components: client
>    Affects Versions: 1.4.1, 1.4.2
>            Reporter: John Vines
>            Assignee: John Vines
>             Fix For: 1.5.0
> Creating a user depends on a different ACL than granting Authorizations. If the user
can do one, but not the other it will still create the user but float back an error. This
can be confusing to end users, so I think we should isolate createUser to just creating the
user. They can then be granted authorizations as need be.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:!default.jspa
For more information on JIRA, see:


View raw message