hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Matteo Bertozzi (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-5342) Grant/Revoke global permissions
Date Fri, 11 May 2012 17:10:50 GMT

    [ https://issues.apache.org/jira/browse/HBASE-5342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13273424#comment-13273424
] 

Matteo Bertozzi commented on HBASE-5342:
----------------------------------------

getTablePermissions() returns the permission for the specified table is used by AccessController.updateAcl()
to write to zookeeper nodes the table permissions.
We can skip root & meta because they are handled as a special case, mostly in AccessController.permissionGranted(),
while the acl table is used to store the global permissions. So instead of return an empty
listMap we return the global permissions.
                
> Grant/Revoke global permissions
> -------------------------------
>
>                 Key: HBASE-5342
>                 URL: https://issues.apache.org/jira/browse/HBASE-5342
>             Project: HBase
>          Issue Type: Sub-task
>            Reporter: Enis Soztutar
>            Assignee: Matteo Bertozzi
>         Attachments: HBASE-5342-draft.patch, HBASE-5342-v0.patch, HBASE-5342-v1.patch,
HBASE-5342-v2.patch, HBASE-5342-v3.patch
>
>
> HBASE-3025 introduced simple ACLs based on coprocessors. It defines global/table/cf/cq
level permissions. However, there is no way to grant/revoke global level permissions, other
than the hbase.superuser conf setting. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message