hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Srikanth Srungarapu (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-12622) user_permission should require global admin to display global and ns permissions
Date Thu, 04 Dec 2014 04:37:12 GMT

    [ https://issues.apache.org/jira/browse/HBASE-12622?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14233905#comment-14233905
] 

Srikanth Srungarapu commented on HBASE-12622:
---------------------------------------------

My two cents.
Going by the discussion in HBASE-9206, specifically
bq. 'A' on the namespace does not grant admin privilege - let's document this exception clearly.
my understanding is there isn't any support added for namespace admin, so adding support for
requireGlobalPermission(ns) is non-trivial/major change, as it needs to be implemented from
scratch. Maybe, we can move forward with the global checks for now?

> user_permission should require global admin to display global and ns permissions
> --------------------------------------------------------------------------------
>
>                 Key: HBASE-12622
>                 URL: https://issues.apache.org/jira/browse/HBASE-12622
>             Project: HBase
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.0.0, 0.98.8, 0.99.2
>            Reporter: Matteo Bertozzi
>            Assignee: Matteo Bertozzi
>             Fix For: 1.0.0, 2.0.0, 0.98.9
>
>         Attachments: HBASE-12622-v0.patch
>
>
> user_permission check the user permission only on the table level (requiring at least
a table-level admin)
> global and namespace permission listing is done without checking anything.
> but only a global admins should be able to perform this operations.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message