hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jerry He (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-11136) Add permission check to roll WAL writer
Date Tue, 13 May 2014 05:50:15 GMT

    [ https://issues.apache.org/jira/browse/HBASE-11136?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13996091#comment-13996091
] 

Jerry He commented on HBASE-11136:
----------------------------------

Hi, Ted

I don't have strong preference either way.
An example that requires global create privilege is 'create table'. 


> Add permission check to roll WAL writer 
> ----------------------------------------
>
>                 Key: HBASE-11136
>                 URL: https://issues.apache.org/jira/browse/HBASE-11136
>             Project: HBase
>          Issue Type: Improvement
>          Components: regionserver, security
>    Affects Versions: 0.96.2, 0.98.2
>            Reporter: Jerry He
>            Assignee: Jerry He
>            Priority: Minor
>             Fix For: 0.99.0
>
>         Attachments: HBASE-11136-trunk-v1.patch
>
>
> Currently HBase provides HBaseAdmin.rollHLogWriter() and shell command to roll WAL on
a region server. But no permission check is done on this operation in a secure cluster.
> We need to add permission check to prevent un-authorized user from running this operation.




--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message