hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Purtell (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-7331) Fix missing coprocessor hooks for openRegion, closeRegion, lockRow, unlockRow and stop region server.
Date Fri, 14 Dec 2012 19:18:13 GMT

    [ https://issues.apache.org/jira/browse/HBASE-7331?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13532558#comment-13532558
] 

Andrew Purtell commented on HBASE-7331:
---------------------------------------

All tests pass locally again with v2 patch except TestHBaseFsck#testRegionShouldNotBeDeployed,
what appears to be an unrelated failure. Going to commit soon if no objection.

[~lhofhansl] Please consider the 0.94 patch for inclusion too. It's a low risk change that
adds more hooks for checking admin permission before allowing actions that affect other users:
stop the RS, close a region, open a region.
                
> Fix missing coprocessor hooks for openRegion, closeRegion, lockRow, unlockRow and stop
region server. 
> ------------------------------------------------------------------------------------------------------
>
>                 Key: HBASE-7331
>                 URL: https://issues.apache.org/jira/browse/HBASE-7331
>             Project: HBase
>          Issue Type: Sub-task
>          Components: regionserver, security
>    Affects Versions: 0.94.3, 0.96.0
>            Reporter: Vandana Ayyalasomayajula
>            Assignee: Vandana Ayyalasomayajula
>             Fix For: 0.94.3, 0.96.0
>
>         Attachments: HBASE-7331_94_02.patch, HBASE-7331_94.patch, HBASE-7331_trunk_02.patch,
HBASE-7331_trunk.patch
>
>
> The following APIs in HRegionServer are either missing hooks to coprocessor or the hooks
are not implemented in the AccessController class for security. As a result any unauthorized
user can:
> 1.Open a region
> 2. Close a region
> 3. Stop region server
> 4. Lock a row
> 5. Unlock a row.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message