hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Huaiyu Zhu (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-12511) namespace permissions - add support from table creation privilege in a namespace 'C'
Date Thu, 18 Dec 2014 08:46:14 GMT

    [ https://issues.apache.org/jira/browse/HBASE-12511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14251388#comment-14251388
] 

Huaiyu Zhu commented on HBASE-12511:
------------------------------------

As we agreed:
1. table creation requires minimal NS 'C'.
2. other table managements (delete/modify/etc) require minimal table 'A|C'
3. namespace managements require minimal global 'A'
4. 'L' is not implemented here

I fixed the requireGlobalPermission so that it only checks global. Added a new method requireNamespacePermission
for checking namespace. modify the unit tests to verify:
1. if you have NS 'C', you can create table under the namespace
2. if you have only NS 'A', you CANNOT create table under the namespace
3. if you have only NS 'A', you CANNOT grant/revoke namespace permissions or modify namespace


> namespace permissions - add support from table creation privilege in a namespace 'C'
> ------------------------------------------------------------------------------------
>
>                 Key: HBASE-12511
>                 URL: https://issues.apache.org/jira/browse/HBASE-12511
>             Project: HBase
>          Issue Type: Sub-task
>            Reporter: Francis Liu
>            Assignee: Huaiyu Zhu
>             Fix For: 1.1.0
>
>         Attachments: HBASE-12511.patch, HBASE-12511.patch, HBASE-12511.patch, HBASE-12511.patch
>
>
> As discussed in namespace permission Jira. A user granted a 'C' on a namespace enables
a user to create tables within the namespace. 'C' on a namespace does not enable a user to
create/drop the namespace.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message