Return-Path: 
 <issues-return-71145-apmail-hbase-issues-archive=hbase.apache.org@hbase.apache.org>
X-Original-To: apmail-hbase-issues-archive@www.apache.org
Delivered-To: apmail-hbase-issues-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id A5A42D999
	for <apmail-hbase-issues-archive@www.apache.org>;
 Tue, 11 Dec 2012 22:51:21 +0000 (UTC)
Received: (qmail 29482 invoked by uid 500); 11 Dec 2012 22:51:21 -0000
Delivered-To: apmail-hbase-issues-archive@hbase.apache.org
Received: (qmail 29441 invoked by uid 500); 11 Dec 2012 22:51:21 -0000
Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@hbase.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@hbase.apache.org>
List-Post: <mailto:issues@hbase.apache.org>
List-Id: <issues.hbase.apache.org>
Delivered-To: mailing list issues@hbase.apache.org
Received: (qmail 29432 invoked by uid 99); 11 Dec 2012 22:51:21 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 11 Dec 2012 22:51:21 +0000
Date: Tue, 11 Dec 2012 22:51:21 +0000 (UTC)
From: "Andrew Purtell (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.12623434.1355253069163.20097.1355266281382@arcas>
In-Reply-To: <JIRA.12623434.1355253069163@arcas>
References: <JIRA.12623434.1355253069163@arcas>
Subject: [jira] [Commented] (HBASE-7330) Security hooks missing in region
 server and master APIs.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


    [ https://issues.apache.org/jira/browse/HBASE-7330?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13529415#comment-13529415 ] 

Andrew Purtell commented on HBASE-7330:
---------------------------------------

This issue is a partial duplicate, but thanks for listing the particulars, I'm not sure they are all laid out in one place. See HBASE-6096 and HBASE-6101. 

It looks like the "Convert to Subtask" JIRA option is now missing, or I'd convert it. Should we close HBASE-7330 and HBASE-7331 as duplicates and move this to HBASE-6101? 
                
> Security hooks missing in region server and master APIs. 
> ---------------------------------------------------------
>
>                 Key: HBASE-7330
>                 URL: https://issues.apache.org/jira/browse/HBASE-7330
>             Project: HBase
>          Issue Type: Umbrella
>          Components: master, regionserver, security
>    Affects Versions: 0.94.3, 0.96.0
>            Reporter: Vandana Ayyalasomayajula
>
> Some of the APIs in Master and Region server are missing hooks to the coprocessors. So even if security is enabled, an unauthorized user can perform certain operations. 
> The following is the list of operations:
> 1. HMaster.offline()
> 2. HMaster.getHTableDescriptors()
> 3. HMaster.getHTableDescriptors(List<String> tableNames)
> 4. HRegionServer.getRegionInfo()
> 5. HRegionInterface.getLastFlushTime()
> 6. HRegionInterface.getStoreFileList(byte[] regionName, byte[] columnFamily)
> 7. HRegionInterface.getStoreFileList(byte[] regionName, byte[][] columnFamilies)
> 8. HRegionInterface.getStoreFileList(byte[] regionName
> 9. HRegionInterface.lockRow(final byte [] regionName, final byte [] row)
> 10. HRegionInterface.unlockRow(final byte [] regionName, final long lockId)
> 11. HRegionInterface.getOnlineRegions()
> 12. HRegionInterface.getHServerInfo()
> 13. HRegionInterface.replicateLogEntries(HLog.Entry[] entries)
> 14. HRegionInterface.stop()
> 15. HRegionInterface.OpenRegions()
> 16. HRegionInterface.closeRegion()

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira