Return-Path: X-Original-To: apmail-hbase-dev-archive@www.apache.org Delivered-To: apmail-hbase-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 0CD96CD34 for ; Fri, 25 May 2012 04:57:56 +0000 (UTC) Received: (qmail 25346 invoked by uid 500); 25 May 2012 04:57:55 -0000 Delivered-To: apmail-hbase-dev-archive@hbase.apache.org Received: (qmail 25274 invoked by uid 500); 25 May 2012 04:57:54 -0000 Mailing-List: contact dev-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@hbase.apache.org Delivered-To: mailing list dev@hbase.apache.org Received: (qmail 25235 invoked by uid 99); 25 May 2012 04:57:52 -0000 Received: from minotaur.apache.org (HELO minotaur.apache.org) (140.211.11.9) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 25 May 2012 04:57:52 +0000 Received: from localhost (HELO mail-yw0-f41.google.com) (127.0.0.1) (smtp-auth username apurtell, mechanism plain) by minotaur.apache.org (qpsmtpd/0.29) with ESMTP; Fri, 25 May 2012 04:57:51 +0000 Received: by yhr47 with SMTP id 47so420308yhr.14 for ; Thu, 24 May 2012 21:57:51 -0700 (PDT) MIME-Version: 1.0 Received: by 10.50.42.130 with SMTP id o2mr1417143igl.37.1337921870594; Thu, 24 May 2012 21:57:50 -0700 (PDT) Received: by 10.64.24.212 with HTTP; Thu, 24 May 2012 21:57:50 -0700 (PDT) Date: Thu, 24 May 2012 21:57:50 -0700 Message-ID: Subject: suggest umbrella issue for AccessController changes From: Andrew Purtell To: dev@hbase.apache.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable The extended maintenance / issues with JIRA is preventing me from making any comments. Or maybe I've added the same comment on a JIRA multiple times. Who knows. There are several issues involving the AccessController and how access control is managed in HBase. I recommend pulling them all together under an umbrella. There are several related issues: 1) Moving beyond the simple choices of the initial implementation (admin actions can be performed by more than the superuser, table owner can now take actions like enable/disable, etc.) 2) More actions must be intercepted as a result of #1 3) New code paths with insufficient coverage. When JIRA is back up I'll pull this together. --=20 Best regards, =A0 =A0- Andy Problems worthy of attack prove their worth by hitting back. - Piet Hein (via Tom White)