Return-Path: X-Original-To: apmail-hbase-issues-archive@www.apache.org Delivered-To: apmail-hbase-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 83E5EDB28 for ; Tue, 19 Jun 2012 19:16:05 +0000 (UTC) Received: (qmail 57776 invoked by uid 500); 19 Jun 2012 19:09:23 -0000 Delivered-To: apmail-hbase-issues-archive@hbase.apache.org Received: (qmail 36236 invoked by uid 500); 19 Jun 2012 19:08:07 -0000 Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list issues@hbase.apache.org Received: (qmail 34398 invoked by uid 99); 19 Jun 2012 19:07:43 -0000 Received: from issues-vm.apache.org (HELO issues-vm) (140.211.11.160) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 19 Jun 2012 19:07:43 +0000 Received: from isssues-vm.apache.org (localhost [127.0.0.1]) by issues-vm (Postfix) with ESMTP id 09958142863 for ; Tue, 19 Jun 2012 19:07:43 +0000 (UTC) Date: Tue, 19 Jun 2012 19:07:43 +0000 (UTC) From: "Laxman (JIRA)" To: issues@hbase.apache.org Message-ID: <753528655.31002.1340132863041.JavaMail.jiratomcat@issues-vm> In-Reply-To: <97424175.15112.1339665582449.JavaMail.jiratomcat@issues-vm> Subject: [jira] [Updated] (HBASE-6209) ACL Corrections for AccessControllerProtocol apis MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HBASE-6209?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-6209: -------------------------- Status: Patch Available (was: Open) patch includes ACL corrections for grant, revoke, getUserPermissions and Append. Please review. > ACL Corrections for AccessControllerProtocol apis > ------------------------------------------------- > > Key: HBASE-6209 > URL: https://issues.apache.org/jira/browse/HBASE-6209 > Project: HBase > Issue Type: Sub-task > Components: security > Affects Versions: 0.94.0, 0.96.0, 0.94.1 > Reporter: Laxman > Assignee: Laxman > Labels: acl, security > Fix For: 0.96.0, 0.94.1 > > Attachments: HBASE-6209.patch > > > APIs provided in AccessController are authorized against global-admin permissions. Instead we need to check for table-admin level permissions. > Edit: Append operation also has no authorization check. We can update it together. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira