hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Purtell (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-5947) Check for valid user/table/family/qualifier and acl state
Date Mon, 29 Oct 2012 18:04:12 GMT

    [ https://issues.apache.org/jira/browse/HBASE-5947?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13486215#comment-13486215

Andrew Purtell commented on HBASE-5947:

[~enis] or [~mbertozzi] I'd like to close out everything under HBASE-6096 starting with HBASE-5352.
If neither of you have anything here I'll take this:
- Check for table / cf existence in grant. not sure about revoke, since we may end up in an
inconsistent state between ACL and table metadata, so revoke can just remove what is available
in ACL table.
- Ensure that there is no table/cf/qualifier level permissions are stored in ACL in preCreateTable
> Check for valid user/table/family/qualifier and acl state
> ---------------------------------------------------------
>                 Key: HBASE-5947
>                 URL: https://issues.apache.org/jira/browse/HBASE-5947
>             Project: HBase
>          Issue Type: Sub-task
>          Components: security
>    Affects Versions: 0.92.1, 0.94.0, 0.96.0
>            Reporter: Matteo Bertozzi
>            Assignee: Matteo Bertozzi
>              Labels: acl
> HBase Shell grant/revoke doesn't check for valid user or table/family/qualifier so can
you end up having rights for something that doesn't exists.
> We might also want to ensure, upon table/column creation, that no entries are already
stored at the acl table. We might still have residual acl entries if something goes wrong,
in postDeleteTable(), postDeleteColumn().

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

View raw message