hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Srikanth Srungarapu (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-12098) User granted namespace table create permissions can't create a table
Date Fri, 26 Sep 2014 13:27:34 GMT

    [ https://issues.apache.org/jira/browse/HBASE-12098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14149135#comment-14149135

Srikanth Srungarapu commented on HBASE-12098:

[~kashifjs@huawei.com] Can you please repeat the same process, but with a minor change in
step 1, instead of using grant 'kashif', 'RWXCA' please try grant 'kashif', 'myns1', 'RWXCA'
and see if you are still not getting any error?

> User granted namespace table create permissions can't create a table
> --------------------------------------------------------------------
>                 Key: HBASE-12098
>                 URL: https://issues.apache.org/jira/browse/HBASE-12098
>             Project: HBase
>          Issue Type: Bug
>          Components: Client, security
>    Affects Versions: 0.98.6
>            Reporter: Dima Spivak
>            Assignee: Srikanth Srungarapu
>            Priority: Critical
>             Fix For: 2.0.0, 0.98.7, 0.99.1
>         Attachments: 12098-master.txt, HBASE-12098.patch, HBASE-12098_master_v2.patch
> From the HBase shell and Java API, I am seeing
> {code}ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions
for user 'dima' (global, action=CREATE){code}
> when I try to create a table in a namespace to which I have been granted RWXCA permissions
by a global admin. Interestingly enough, this only seems to extend to table creation; the
same user is then allowed to disable and drop a table created by a global admin in that namespace.

This message was sent by Atlassian JIRA

View raw message