Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Date: Fri, 26 Sep 2014 13:34:34 +0000 (UTC)
From: "Srikanth Srungarapu (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.12744104.1411671801000.130871.1411738474292@Atlassian.JIRA>
In-Reply-To: <JIRA.12744104.1411671801000@Atlassian.JIRA>
References: <JIRA.12744104.1411671801000@Atlassian.JIRA>
 <JIRA.12744104.1411671801818@arcas>
Subject: [jira] [Commented] (HBASE-12098) User granted namespace table
 create permissions can't create a table
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/HBASE-12098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14149138#comment-14149138 ] 

Srikanth Srungarapu commented on HBASE-12098:
---------------------------------------------

Sorry, the modified step I mentioned has to be grant 'kashif', 'RWXCA', '@myns1'.

> User granted namespace table create permissions can't create a table
> --------------------------------------------------------------------
>
>                 Key: HBASE-12098
>                 URL: https://issues.apache.org/jira/browse/HBASE-12098
>             Project: HBase
>          Issue Type: Bug
>          Components: Client, security
>    Affects Versions: 0.98.6
>            Reporter: Dima Spivak
>            Assignee: Srikanth Srungarapu
>            Priority: Critical
>             Fix For: 2.0.0, 0.98.7, 0.99.1
>
>         Attachments: 12098-master.txt, HBASE-12098.patch, HBASE-12098_master_v2.patch
>
>
> From the HBase shell and Java API, I am seeing
> {code}ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for user 'dima' (global, action=CREATE){code}
> when I try to create a table in a namespace to which I have been granted RWXCA permissions by a global admin. Interestingly enough, this only seems to extend to table creation; the same user is then allowed to disable and drop a table created by a global admin in that namespace.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)