hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Liu Shaohui (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HBASE-12916) No access control for replicating WAL entries
Date Mon, 26 Jan 2015 06:40:34 GMT
Liu Shaohui created HBASE-12916:
-----------------------------------

             Summary: No access control for replicating WAL entries
                 Key: HBASE-12916
                 URL: https://issues.apache.org/jira/browse/HBASE-12916
             Project: HBase
          Issue Type: Bug
          Components: Replication
    Affects Versions: 0.94.26, 2.0.0, 0.98.12
            Reporter: Liu Shaohui
            Assignee: Liu Shaohui


Currently, there is no access control for replicating WAL entries in secure HBase cluster.
Any authenticated user can write any data they want to any table of a secure cluster by using
the replication api.

Simple solution is  to add permission check before replicating WAL entries. And only user
with global write permission can replicate WAL entries to this cluster.

Another option is adding "Replication" action in hbase and only user with "Replication" permission
can replicate WAL entries to this cluster?

[~apurtell] 

What's your suggestion? Thanks




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message