hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Abhishek Kumar (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HBASE-13619) CreateTableHandler: postCreateTableHanler coprocessor runs as RemoteRpcUser privileged action.
Date Tue, 05 May 2015 05:39:06 GMT
Abhishek Kumar created HBASE-13619:
--------------------------------------

             Summary: CreateTableHandler: postCreateTableHanler coprocessor runs as RemoteRpcUser
privileged action.
                 Key: HBASE-13619
                 URL: https://issues.apache.org/jira/browse/HBASE-13619
             Project: HBase
          Issue Type: Improvement
          Components: Coprocessors
            Reporter: Abhishek Kumar
            Priority: Minor


It seems that post HBASE-11886 merge, in secure mode, custom master coprocessor 's postCreateTableHandler
runs as remoteRPCUser privilege so will not be able to perform operation (such as hdfs operations)
which requires master user privileges.
Coprocessor developer can however, get around this by wrapping their code under master user
privilege action by using User.runAsLoginUser, same can be documented.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message