hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Enis Soztutar (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-12511) namespace permissions - add support from table creation privilege in a namespace 'C'
Date Sat, 06 Dec 2014 02:18:13 GMT

    [ https://issues.apache.org/jira/browse/HBASE-12511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14236499#comment-14236499
] 

Enis Soztutar commented on HBASE-12511:
---------------------------------------

bq. The current code requires global permission 'CREATE'. However, there is a bug in 'requireGlobalPermission'
which checks NS permissions
It seems serious, but I lack the history for this. Maybe [~apurtell] can shine some light.
I thought it is intentional. 

It seems that we should really modify the TestAccessController to test ALL combinations in
https://hbase.apache.org/book/appendix_acl_matrix.html. Right now that test does not do any
NS checks AFAIK. 

> namespace permissions - add support from table creation privilege in a namespace 'C'
> ------------------------------------------------------------------------------------
>
>                 Key: HBASE-12511
>                 URL: https://issues.apache.org/jira/browse/HBASE-12511
>             Project: HBase
>          Issue Type: Sub-task
>            Reporter: Francis Liu
>            Assignee: Huaiyu Zhu
>         Attachments: HBASE-12511.patch, HBASE-12511.patch
>
>
> As discussed in namespace permission Jira. A user granted a 'C' on a namespace enables
a user to create tables within the namespace. 'C' on a namespace does not enable a user to
create/drop the namespace.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message