Return-Path: X-Original-To: apmail-hbase-issues-archive@www.apache.org Delivered-To: apmail-hbase-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 5F7C79DB8 for ; Thu, 17 May 2012 02:52:30 +0000 (UTC) Received: (qmail 53133 invoked by uid 500); 17 May 2012 02:52:29 -0000 Delivered-To: apmail-hbase-issues-archive@hbase.apache.org Received: (qmail 53066 invoked by uid 500); 17 May 2012 02:52:29 -0000 Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list issues@hbase.apache.org Received: (qmail 53058 invoked by uid 99); 17 May 2012 02:52:29 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 17 May 2012 02:52:29 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED,T_RP_MATCHES_RCVD X-Spam-Check-By: apache.org Received: from [140.211.11.116] (HELO hel.zones.apache.org) (140.211.11.116) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 17 May 2012 02:52:27 +0000 Received: from hel.zones.apache.org (hel.zones.apache.org [140.211.11.116]) by hel.zones.apache.org (Postfix) with ESMTP id 8D82E6A28 for ; Thu, 17 May 2012 02:52:06 +0000 (UTC) Date: Thu, 17 May 2012 02:52:06 +0000 (UTC) From: "Andrew Purtell (JIRA)" To: issues@hbase.apache.org Message-ID: <525052214.7107.1337223126581.JavaMail.tomcat@hel.zones.apache.org> In-Reply-To: <1107139134.7106.1337223006767.JavaMail.tomcat@hel.zones.apache.org> Subject: [jira] [Updated] (HBASE-6030) Log AccessDeniedExceptions at INFO level MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HBASE-6030?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andrew Purtell updated HBASE-6030: ---------------------------------- Component/s: coprocessors Assignee: Andrew Purtell > Log AccessDeniedExceptions at INFO level > ---------------------------------------- > > Key: HBASE-6030 > URL: https://issues.apache.org/jira/browse/HBASE-6030 > Project: HBase > Issue Type: Improvement > Components: coprocessors, security > Affects Versions: 0.92.2, 0.96.0, 0.94.1 > Environment: AccessController coprocessor > Reporter: Andrew Purtell > Assignee: Andrew Purtell > Priority: Minor > > The HBase AccessController can emit a detailed trace of every action, and whether it succeeded or failed, but this is expected to be used only for debugging an application in a staging environment. In production a RegionServer may have thousands of requests per second, logging the audit trace just isn't viable. However, we might want to log the AccessDeniedExceptions which result from access failures in the daemon logs like Hadoop does, e.g. the NameNode log. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira