Return-Path: X-Original-To: apmail-hbase-issues-archive@www.apache.org Delivered-To: apmail-hbase-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 5C48A9C9F for ; Wed, 13 Jun 2012 19:29:45 +0000 (UTC) Received: (qmail 28982 invoked by uid 500); 13 Jun 2012 19:26:48 -0000 Delivered-To: apmail-hbase-issues-archive@hbase.apache.org Received: (qmail 10132 invoked by uid 500); 13 Jun 2012 19:26:08 -0000 Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list issues@hbase.apache.org Received: (qmail 41824 invoked by uid 99); 13 Jun 2012 17:43:45 -0000 Received: from issues-vm.apache.org (HELO issues-vm) (140.211.11.160) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 13 Jun 2012 17:43:45 +0000 Received: from isssues-vm.apache.org (localhost [127.0.0.1]) by issues-vm (Postfix) with ESMTP id 657AD1404B9 for ; Wed, 13 Jun 2012 17:43:45 +0000 (UTC) Date: Wed, 13 Jun 2012 17:43:45 +0000 (UTC) From: "Laxman (JIRA)" To: issues@hbase.apache.org Message-ID: <1294573071.13290.1339609425419.JavaMail.jiratomcat@issues-vm> In-Reply-To: <8445618.47562.1339073663246.JavaMail.jiratomcat@issues-vm> Subject: [jira] [Updated] (HBASE-6188) Remove the concept of table owner MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HBASE-6188?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-6188: -------------------------- Attachment: HBASE-6188.2.patch > Remove the concept of table owner > --------------------------------- > > Key: HBASE-6188 > URL: https://issues.apache.org/jira/browse/HBASE-6188 > Project: HBase > Issue Type: Sub-task > Components: security > Affects Versions: 0.94.0, 0.96.0, 0.94.1 > Reporter: Andrew Purtell > Assignee: Laxman > Labels: security > Fix For: 0.96.0, 0.94.1 > > Attachments: HBASE-6188.1.patch, HBASE-6188.2.patch, HBASE-6188.patch > > > The table owner concept was a design simplification in the initial drop. > First, the design changes under review means only a user with GLOBAL CREATE permission can create a table, which will probably be an administrator. > Then, granting implicit permissions may lead to oversights and it adds unnecessary conditionals to our code. So instead the administrator with GLOBAL CREATE permission should make the appropriate grants at table create time. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira