hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Purtell (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-12098) User granted namespace table create permissions can't create a table
Date Sun, 28 Sep 2014 00:12:33 GMT

    [ https://issues.apache.org/jira/browse/HBASE-12098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14150825#comment-14150825
] 

Andrew Purtell commented on HBASE-12098:
----------------------------------------

This is a bug fix I think. We don't need to flag it or document it as an incompatible change.
Should have always worked this way. We also had an issue earlier where group permissions should
have been checked on namespaces and were not. Same class of problem. 

+1

> User granted namespace table create permissions can't create a table
> --------------------------------------------------------------------
>
>                 Key: HBASE-12098
>                 URL: https://issues.apache.org/jira/browse/HBASE-12098
>             Project: HBase
>          Issue Type: Bug
>          Components: Client, security
>    Affects Versions: 0.98.6
>            Reporter: Dima Spivak
>            Assignee: Srikanth Srungarapu
>            Priority: Critical
>             Fix For: 2.0.0, 0.98.7, 0.99.1
>
>         Attachments: 12098-master.txt, HBASE-12098.patch, HBASE-12098_master_v2.patch
>
>
> From the HBase shell and Java API, I am seeing
> {code}ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions
for user 'dima' (global, action=CREATE){code}
> when I try to create a table in a namespace to which I have been granted RWXCA permissions
by a global admin. Interestingly enough, this only seems to extend to table creation; the
same user is then allowed to disable and drop a table created by a global admin in that namespace.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message