Return-Path: 
 <issues-return-100536-apmail-hbase-issues-archive=hbase.apache.org@hbase.apache.org>
X-Original-To: apmail-hbase-issues-archive@www.apache.org
Delivered-To: apmail-hbase-issues-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 3A67110C14
	for <apmail-hbase-issues-archive@www.apache.org>;
 Wed,  5 Jun 2013 09:30:28 +0000 (UTC)
Received: (qmail 16881 invoked by uid 500); 5 Jun 2013 09:30:25 -0000
Delivered-To: apmail-hbase-issues-archive@hbase.apache.org
Received: (qmail 16711 invoked by uid 500); 5 Jun 2013 09:30:24 -0000
Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@hbase.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@hbase.apache.org>
List-Post: <mailto:issues@hbase.apache.org>
List-Id: <issues.hbase.apache.org>
Delivered-To: mailing list issues@hbase.apache.org
Received: (qmail 16146 invoked by uid 99); 5 Jun 2013 09:30:22 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 05 Jun 2013 09:30:22 +0000
Date: Wed, 5 Jun 2013 09:30:22 +0000 (UTC)
From: "Andrew Purtell (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.12651063.1370424576708.70522.1370424622934@arcas>
In-Reply-To: <JIRA.12651063.1370424576708@arcas>
References: <JIRA.12651063.1370424576708@arcas>
Subject: [jira] [Updated] (HBASE-8692) [AccessController] Restrict
 HTableDescriptor enumeration
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


     [ https://issues.apache.org/jira/browse/HBASE-8692?page=3Dcom.atlassia=
n.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrew Purtell updated HBASE-8692:
----------------------------------

    Component/s: security
                 Coprocessors
   =20
> [AccessController] Restrict HTableDescriptor enumeration
> --------------------------------------------------------
>
>                 Key: HBASE-8692
>                 URL: https://issues.apache.org/jira/browse/HBASE-8692
>             Project: HBase
>          Issue Type: Improvement
>          Components: Coprocessors, security
>    Affects Versions: 0.98.0, 0.95.1, 0.94.9
>            Reporter: Andrew Purtell
>            Assignee: Andrew Purtell
>
> Some users are concerned about having table schema exposed to every user =
and would like it protected, similar to the rest of the admin operations fo=
r schema.=20
> This used to be hopeless because META would leak HTableDescriptors in HRe=
gionInfo, but that is no longer the case in 0.94+.
> Consider adding CP hooks in the master for intercepting HMasterInterface#=
getHTableDescriptors and HMasterInterface#getHTableDescriptors(List<String>=
).  Add support in the AccessController for only allowing GLOBAL ADMIN to t=
he first method. Add support in the AccessController for allowing access to=
 the descriptors for the table names in the list of the second method only =
if the user has TABLE ADMIN privilege for all of the listed table names.
> Then, fix the code in HBaseAdmin (and elsewhere) that expects to be able =
to enumerate all table descriptors e.g. in deleteTable. A TABLE ADMIN can d=
elete a table but won=E2=80=99t have GLOBAL ADMIN privilege to enumerate th=
e total list. So a minor fixup is needed here, and in other places like thi=
s which make the same assumption.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira