hbase-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Purtell (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (HBASE-6030) Log AccessDeniedExceptions at INFO level
Date Tue, 29 Apr 2014 21:15:26 GMT

     [ https://issues.apache.org/jira/browse/HBASE-6030?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Andrew Purtell resolved HBASE-6030.
-----------------------------------

    Resolution: Not a Problem
      Assignee:     (was: Andrew Purtell)

> Log AccessDeniedExceptions at INFO level
> ----------------------------------------
>
>                 Key: HBASE-6030
>                 URL: https://issues.apache.org/jira/browse/HBASE-6030
>             Project: HBase
>          Issue Type: Improvement
>          Components: Coprocessors, security
>    Affects Versions: 0.92.2, 0.94.1, 0.95.2
>         Environment: AccessController coprocessor
>            Reporter: Andrew Purtell
>            Priority: Minor
>
> The HBase AccessController can emit a detailed trace of every action, and whether it
succeeded or failed, but this is expected to be used only for debugging an application in
a staging environment. In production a RegionServer may have thousands of requests per second,
logging the audit trace just isn't viable. However, we might want to log the AccessDeniedExceptions
which result from access failures in the daemon logs like Hadoop does, e.g. the NameNode log.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message