hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Purtell (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-7330) Security hooks missing in region server and master APIs.
Date Wed, 12 Dec 2012 02:35:21 GMT

    [ https://issues.apache.org/jira/browse/HBASE-7330?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13529580#comment-13529580
] 

Andrew Purtell commented on HBASE-7330:
---------------------------------------

Let me try that.
                
> Security hooks missing in region server and master APIs. 
> ---------------------------------------------------------
>
>                 Key: HBASE-7330
>                 URL: https://issues.apache.org/jira/browse/HBASE-7330
>             Project: HBase
>          Issue Type: Umbrella
>          Components: master, regionserver, security
>    Affects Versions: 0.94.3, 0.96.0
>            Reporter: Vandana Ayyalasomayajula
>
> Some of the APIs in Master and Region server are missing hooks to the coprocessors. So
even if security is enabled, an unauthorized user can perform certain operations. 
> The following is the list of operations:
> 1. HMaster.offline()
> 2. HMaster.getHTableDescriptors()
> 3. HMaster.getHTableDescriptors(List<String> tableNames)
> 4. HRegionServer.getRegionInfo()
> 5. HRegionInterface.getLastFlushTime()
> 6. HRegionInterface.getStoreFileList(byte[] regionName, byte[] columnFamily)
> 7. HRegionInterface.getStoreFileList(byte[] regionName, byte[][] columnFamilies)
> 8. HRegionInterface.getStoreFileList(byte[] regionName
> 9. HRegionInterface.lockRow(final byte [] regionName, final byte [] row)
> 10. HRegionInterface.unlockRow(final byte [] regionName, final long lockId)
> 11. HRegionInterface.getOnlineRegions()
> 12. HRegionInterface.getHServerInfo()
> 13. HRegionInterface.replicateLogEntries(HLog.Entry[] entries)
> 14. HRegionInterface.stop()
> 15. HRegionInterface.OpenRegions()
> 16. HRegionInterface.closeRegion()

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message