Return-Path: X-Original-To: apmail-hbase-issues-archive@www.apache.org Delivered-To: apmail-hbase-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 533D69EC0 for ; Mon, 11 Jun 2012 16:56:43 +0000 (UTC) Received: (qmail 33386 invoked by uid 500); 11 Jun 2012 16:56:43 -0000 Delivered-To: apmail-hbase-issues-archive@hbase.apache.org Received: (qmail 33352 invoked by uid 500); 11 Jun 2012 16:56:43 -0000 Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list issues@hbase.apache.org Received: (qmail 33342 invoked by uid 99); 11 Jun 2012 16:56:43 -0000 Received: from issues-vm.apache.org (HELO issues-vm) (140.211.11.160) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 11 Jun 2012 16:56:43 +0000 Received: from isssues-vm.apache.org (localhost [127.0.0.1]) by issues-vm (Postfix) with ESMTP id DCBED141BF8 for ; Mon, 11 Jun 2012 16:56:42 +0000 (UTC) Date: Mon, 11 Jun 2012 16:56:42 +0000 (UTC) From: "ramkrishna.s.vasudevan (JIRA)" To: issues@hbase.apache.org Message-ID: <462100470.3120.1339433802906.JavaMail.jiratomcat@issues-vm> In-Reply-To: <8445618.47562.1339073663246.JavaMail.jiratomcat@issues-vm> Subject: [jira] [Commented] (HBASE-6188) Remove the concept of table owner MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HBASE-6188?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13292878#comment-13292878 ] ramkrishna.s.vasudevan commented on HBASE-6188: ----------------------------------------------- @Andy Had a small discussion with Laxman regarding the role of CREATE. I think the suggestion given by Laxman makes sense. Even if online schema modification is introduced the role of CREATE with the above said functions will still apply. Just wanted to add my thoughts in this. Thanks Andy and Laxman. > Remove the concept of table owner > --------------------------------- > > Key: HBASE-6188 > URL: https://issues.apache.org/jira/browse/HBASE-6188 > Project: HBase > Issue Type: Sub-task > Components: security > Reporter: Andrew Purtell > Assignee: Laxman > Labels: security > > The table owner concept was a design simplification in the initial drop. > First, the design changes under review means only a user with GLOBAL CREATE permission can create a table, which will probably be an administrator. > Then, granting implicit permissions may lead to oversights and it adds unnecessary conditionals to our code. So instead the administrator with GLOBAL CREATE permission should make the appropriate grants at table create time. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira