Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Date: Thu, 24 May 2012 04:55:41 +0000 (UTC)
From: "Laxman (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <1723453550.14974.1337835341737.JavaMail.jiratomcat@issues-vm>
Subject: [jira] [Created] (HBASE-6086) Admin operations on a table should be
 authorized against table permissions instead of global permissions.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Laxman created HBASE-6086:
-----------------------------

             Summary: Admin operations on a table should be authorized against table permissions instead of global permissions.
                 Key: HBASE-6086
                 URL: https://issues.apache.org/jira/browse/HBASE-6086
             Project: HBase
          Issue Type: Sub-task
          Components: security
    Affects Versions: 0.94.0
            Reporter: Laxman
            Assignee: Laxman


Still some inconsistency exists after HBASE-6061. We actually need to authorize against table permissions instead of global permissions here.

{code}
+  private void requireTableAdminPermission(MasterCoprocessorEnvironment e,
+      byte[] tableName) throws IOException {
+    if (isActiveUserTableOwner(e, tableName)) {
+      requirePermission(Permission.Action.CREATE);
+    } else {
+      requirePermission(Permission.Action.ADMIN);
+    }
+  }
{code}


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira