Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Date: Tue, 19 Jun 2012 19:34:42 +0000 (UTC)
From: "Laxman (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <197709648.31098.1340134482773.JavaMail.jiratomcat@issues-vm>
In-Reply-To: <403660443.29133.1340101243078.JavaMail.jiratomcat@issues-vm>
Subject: [jira] [Commented] (HBASE-6238) Grant on Meta Table is not taking
 affect.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/HBASE-6238?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13397004#comment-13397004 ] 

Laxman commented on HBASE-6238:
-------------------------------

context: http://mail-archives.apache.org/mod_mbox/hbase-dev/201206.mbox/%3CCA%2BRK%3D_C%3D0JnJ0CCJVYCicrWCn6gPn1zoBDahUP6xaKGZPYDBVA%40mail.gmail.com%3E

Before correcting in ruby scripts, I tried to edit/flush META after giving permissions appropriate permissions on META table to a user (non-super user). I was expecting the operation to succeed. But it didn't due to above piece of code.

bq. What are the exceptions to that rule?
In one of our scenario, owner of a table needs to pre-create regions (>=1000) by directly adding entries to META & flushes META.

If we remove the snippet of code which I quoted in my previous comments, META will be treated as any other table.

Should we proceed with removing this piece of code?

Note: Irrespective of this change, we may still needs to correct the ruby scripts as discussed on dev mailing list. Will file a JIRA separately.
                
> Grant on Meta Table is not taking affect.
> -----------------------------------------
>
>                 Key: HBASE-6238
>                 URL: https://issues.apache.org/jira/browse/HBASE-6238
>             Project: HBase
>          Issue Type: Sub-task
>          Components: security
>    Affects Versions: 0.94.0, 0.96.0, 0.94.1
>            Reporter: Laxman
>            Assignee: Laxman
>              Labels: acl, security
>
> User is not able to perform authorized operations on Meta.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira