hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Laxman (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-6188) Remove the concept of table owner
Date Fri, 08 Jun 2012 23:32:23 GMT

    [ https://issues.apache.org/jira/browse/HBASE-6188?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13292091#comment-13292091

Laxman commented on HBASE-6188:

In contrast to regular RDBMS notations, I considered all the above operations as DDL. May
be I coined a wrong word here. 

AddColumn, DeleteColumn, DeleteTable, DisableTable, EnableTable, ModifyColumn, ModifyTable

We have the following options now.

Approach #1: DDL operations requires "C"
Approach #2: DDL operations requires "A"
Approach #3: DDL operatoins requires either "C" or "A"

Personally I prefer to go with #1 as it makes it clean.

Note that above list of operations doesn't contain CreateTable which requires "C".
So this another reason for my preference for #1.
> Remove the concept of table owner
> ---------------------------------
>                 Key: HBASE-6188
>                 URL: https://issues.apache.org/jira/browse/HBASE-6188
>             Project: HBase
>          Issue Type: Sub-task
>          Components: security
>            Reporter: Andrew Purtell
>            Assignee: Laxman
>              Labels: security
> The table owner concept was a design simplification in the initial drop.
> First, the design changes under review means only a user with GLOBAL CREATE permission
can create a table, which will probably be an administrator.
> Then, granting implicit permissions may lead to oversights and it adds unnecessary conditionals
to our code. So instead the administrator with GLOBAL CREATE permission should make the appropriate
grants at table create time.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


View raw message