hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Matteo Bertozzi (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-14432) Procedure V2 - Procedure.owner field should be set to enforce ACL on admin tasks
Date Mon, 14 Sep 2015 19:04:47 GMT

    [ https://issues.apache.org/jira/browse/HBASE-14432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14744047#comment-14744047
] 

Matteo Bertozzi commented on HBASE-14432:
-----------------------------------------

there are no changes to the ACL code in the patch to check the user...
also, the toStringClassDetails() of each class might be revisited now. otherwise we have the
two user= and owner= printing the same thing

> Procedure V2 - Procedure.owner field should be set to enforce ACL on admin tasks
> --------------------------------------------------------------------------------
>
>                 Key: HBASE-14432
>                 URL: https://issues.apache.org/jira/browse/HBASE-14432
>             Project: HBase
>          Issue Type: Sub-task
>          Components: proc-v2
>    Affects Versions: 2.0.0, 1.1.2, 1.3.0
>            Reporter: Stephen Yuan Jiang
>            Assignee: Stephen Yuan Jiang
>              Labels: security
>         Attachments: HBASE-14432.patch
>
>
> In the Procedure class, the owner field is never set. We need to set it so that we can
enforce ACLs on admin tasks such as whether a user has privilege to abort a procedure.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message