hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Francis Liu (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-12511) namespace permissions - add support from table creation privilege in a namespace 'C'
Date Thu, 18 Dec 2014 06:44:13 GMT

    [ https://issues.apache.org/jira/browse/HBASE-12511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14251298#comment-14251298

Francis Liu commented on HBASE-12511:

Yeah lets try and get it in. It'd be better not to surprise users.  If already captured I'd
like to follow what was agreed up in HBASE-9206.

Seems fine till we get L permission. Can we re-use X in any way? Unix dir permission uses
X for dir listing.
X is for coprocessor (at least in 98). The overload of privileges would be confusing?

So we have to fix this case, because having ADMIN on NS will allow you to delete the NS? Delete
table will work if you have C on table, don't we want the same?
Except for the special case for 'C'.  Namespace privileges is mainly used as another level
of hierarchy (privileges to be inherited by tables).  ie We might want user to have C on namespace
so he can create tables but we don't want that user to be able to drop the namespace. Same
goes with the other privileges. Another use case was to prevent users from altering namespace
configuration (ie quota).

> namespace permissions - add support from table creation privilege in a namespace 'C'
> ------------------------------------------------------------------------------------
>                 Key: HBASE-12511
>                 URL: https://issues.apache.org/jira/browse/HBASE-12511
>             Project: HBase
>          Issue Type: Sub-task
>            Reporter: Francis Liu
>            Assignee: Huaiyu Zhu
>             Fix For: 1.1.0
>         Attachments: HBASE-12511.patch, HBASE-12511.patch, HBASE-12511.patch
> As discussed in namespace permission Jira. A user granted a 'C' on a namespace enables
a user to create tables within the namespace. 'C' on a namespace does not enable a user to
create/drop the namespace.

This message was sent by Atlassian JIRA

View raw message