hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Purtell (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HBASE-6030) Log AccessDeniedExceptions at INFO level
Date Thu, 17 May 2012 02:50:06 GMT
Andrew Purtell created HBASE-6030:
-------------------------------------

             Summary: Log AccessDeniedExceptions at INFO level
                 Key: HBASE-6030
                 URL: https://issues.apache.org/jira/browse/HBASE-6030
             Project: HBase
          Issue Type: Improvement
          Components: security
    Affects Versions: 0.92.2, 0.96.0, 0.94.1
         Environment: AccessController coprocessor
            Reporter: Andrew Purtell
            Priority: Minor


The HBase AccessController can emit a detailed trace of every action, and whether it succeeded
or failed, but this is expected to be used only for debugging an application in a staging
environment. In production a RegionServer may have thousands of requests per second, logging
the audit trace just isn't viable. However, we might want to log the AccessDeniedExceptions
which result from access failures in the daemon logs like Hadoop does, e.g. the NameNode log.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message