hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Srikanth Srungarapu (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HBASE-12098) User granted namespace table create permissions can't create a table
Date Fri, 26 Sep 2014 04:28:35 GMT

     [ https://issues.apache.org/jira/browse/HBASE-12098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Srikanth Srungarapu updated HBASE-12098:
----------------------------------------
    Attachment: HBASE-12098_master_v2.patch

[~tedyu@apache.org] Thanks for uploading the master patch. As for the errors, I included the
null check and made sure the tests in org.apache.hadoop.hbase.security.access pass locally.


> User granted namespace table create permissions can't create a table
> --------------------------------------------------------------------
>
>                 Key: HBASE-12098
>                 URL: https://issues.apache.org/jira/browse/HBASE-12098
>             Project: HBase
>          Issue Type: Bug
>          Components: Client, security
>    Affects Versions: 0.98.6
>            Reporter: Dima Spivak
>            Assignee: Srikanth Srungarapu
>            Priority: Critical
>             Fix For: 2.0.0, 0.98.7, 0.99.1
>
>         Attachments: 12098-master.txt, HBASE-12098.patch, HBASE-12098_master_v2.patch
>
>
> From the HBase shell and Java API, I am seeing
> {code}ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions
for user 'dima' (global, action=CREATE){code}
> when I try to create a table in a namespace to which I have been granted RWXCA permissions
by a global admin. Interestingly enough, this only seems to extend to table creation; the
same user is then allowed to disable and drop a table created by a global admin in that namespace.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message