hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Laxman (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HBASE-6086) Admin operations on a table should be authorized against table permissions instead of global permissions.
Date Thu, 24 May 2012 04:55:41 GMT
Laxman created HBASE-6086:
-----------------------------

             Summary: Admin operations on a table should be authorized against table permissions
instead of global permissions.
                 Key: HBASE-6086
                 URL: https://issues.apache.org/jira/browse/HBASE-6086
             Project: HBase
          Issue Type: Sub-task
          Components: security
    Affects Versions: 0.94.0
            Reporter: Laxman
            Assignee: Laxman


Still some inconsistency exists after HBASE-6061. We actually need to authorize against table
permissions instead of global permissions here.

{code}
+  private void requireTableAdminPermission(MasterCoprocessorEnvironment e,
+      byte[] tableName) throws IOException {
+    if (isActiveUserTableOwner(e, tableName)) {
+      requirePermission(Permission.Action.CREATE);
+    } else {
+      requirePermission(Permission.Action.ADMIN);
+    }
+  }
{code}


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message