Return-Path: 
 <issues-return-71212-apmail-hbase-issues-archive=hbase.apache.org@hbase.apache.org>
X-Original-To: apmail-hbase-issues-archive@www.apache.org
Delivered-To: apmail-hbase-issues-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id A7113D04A
	for <apmail-hbase-issues-archive@www.apache.org>;
 Wed, 12 Dec 2012 00:31:22 +0000 (UTC)
Received: (qmail 72357 invoked by uid 500); 12 Dec 2012 00:31:21 -0000
Delivered-To: apmail-hbase-issues-archive@hbase.apache.org
Received: (qmail 72294 invoked by uid 500); 12 Dec 2012 00:31:21 -0000
Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@hbase.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@hbase.apache.org>
List-Post: <mailto:issues@hbase.apache.org>
List-Id: <issues.hbase.apache.org>
Delivered-To: mailing list issues@hbase.apache.org
Received: (qmail 72033 invoked by uid 99); 12 Dec 2012 00:31:21 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 12 Dec 2012 00:31:21 +0000
Date: Wed, 12 Dec 2012 00:31:21 +0000 (UTC)
From: "Vandana Ayyalasomayajula (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.12623434.1355253069163.20700.1355272281190@arcas>
In-Reply-To: <JIRA.12623434.1355253069163@arcas>
References: <JIRA.12623434.1355253069163@arcas>
Subject: [jira] [Commented] (HBASE-7330) Security hooks missing in region
 server and master APIs.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


    [ https://issues.apache.org/jira/browse/HBASE-7330?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13529511#comment-13529511 ] 

Vandana Ayyalasomayajula commented on HBASE-7330:
-------------------------------------------------

[~apurtell] Looks good. So are you okay with close this jira as duplicate and then making HBASE-7331 as subtask of 6101 or 5352 ?
                
> Security hooks missing in region server and master APIs. 
> ---------------------------------------------------------
>
>                 Key: HBASE-7330
>                 URL: https://issues.apache.org/jira/browse/HBASE-7330
>             Project: HBase
>          Issue Type: Umbrella
>          Components: master, regionserver, security
>    Affects Versions: 0.94.3, 0.96.0
>            Reporter: Vandana Ayyalasomayajula
>
> Some of the APIs in Master and Region server are missing hooks to the coprocessors. So even if security is enabled, an unauthorized user can perform certain operations. 
> The following is the list of operations:
> 1. HMaster.offline()
> 2. HMaster.getHTableDescriptors()
> 3. HMaster.getHTableDescriptors(List<String> tableNames)
> 4. HRegionServer.getRegionInfo()
> 5. HRegionInterface.getLastFlushTime()
> 6. HRegionInterface.getStoreFileList(byte[] regionName, byte[] columnFamily)
> 7. HRegionInterface.getStoreFileList(byte[] regionName, byte[][] columnFamilies)
> 8. HRegionInterface.getStoreFileList(byte[] regionName
> 9. HRegionInterface.lockRow(final byte [] regionName, final byte [] row)
> 10. HRegionInterface.unlockRow(final byte [] regionName, final long lockId)
> 11. HRegionInterface.getOnlineRegions()
> 12. HRegionInterface.getHServerInfo()
> 13. HRegionInterface.replicateLogEntries(HLog.Entry[] entries)
> 14. HRegionInterface.stop()
> 15. HRegionInterface.OpenRegions()
> 16. HRegionInterface.closeRegion()

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira