hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Matteo Bertozzi (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HBASE-12301) user_permission command does not show global permissions
Date Tue, 21 Oct 2014 11:04:34 GMT

     [ https://issues.apache.org/jira/browse/HBASE-12301?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Matteo Bertozzi updated HBASE-12301:
------------------------------------
    Attachment: HBASE-12301-v0.patch

the default "user_permission" with no argument was now going directly to the get table permission
instead of going to the global one. basically the first if (tableRegex == null) will never
be true.

Then there was another minor issue with the namespace handling, not checking for the nil tableRegex.

the attached patch changes the behavior to what was before, showing only the global permission
when user_permission is invoked with no argument.
If you want the table permission you have to specify the regex as was described in the user_permission
help
{noformat}
    hbase> user_permission
    hbase> user_permission 'table1'
    hbase> user_permission 'namespace1:table1'
    hbase> user_permission '.*'
    hbase> user_permission '^[A-C].*'
{noformat}

> user_permission command does not show global permissions
> --------------------------------------------------------
>
>                 Key: HBASE-12301
>                 URL: https://issues.apache.org/jira/browse/HBASE-12301
>             Project: HBase
>          Issue Type: Bug
>          Components: security, shell
>    Affects Versions: 0.98.4, 2.0.0
>            Reporter: Jerry He
>            Assignee: Matteo Bertozzi
>         Attachments: HBASE-12301-v0.patch
>
>
> It seems that since 0,98 or later, the shell command does not show global permission
anymore, even requested by user with the right privilege.
> {code}
> hbase(main):004:0> user_permission
> User                            Table,Family,Qualifier:Permission
>  hbase                          default,table1,,: [Permission: actions=READ,WRITE,EXEC,CREATE,ADMIN]
>  user2                          default,table1,,: [Permission: actions=READ,WRITE]
>  hbase                          default,table2,,: [Permission: actions=READ,WRITE,EXEC,CREATE,ADMIN]
>  user2                          default,table2,,: [Permission: actions=READ,WRITE]
> {code}
> I recall in the older versions, global permissions were shown as permissions on the hbase:acl
table.
> Anyway we need a way to show the global permissions as part of user_permission request.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message