Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id ABA83200AE1 for ; Mon, 23 May 2016 05:40:14 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id AA50C160A28; Mon, 23 May 2016 03:40:14 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 00EA2160A06 for ; Mon, 23 May 2016 05:40:13 +0200 (CEST) Received: (qmail 97907 invoked by uid 500); 23 May 2016 03:40:13 -0000 Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list issues@hbase.apache.org Received: (qmail 97861 invoked by uid 99); 23 May 2016 03:40:12 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 23 May 2016 03:40:12 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id CB2D62C1F56 for ; Mon, 23 May 2016 03:40:12 +0000 (UTC) Date: Mon, 23 May 2016 03:40:12 +0000 (UTC) From: "li xiang (JIRA)" To: issues@hbase.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (HBASE-15877) user_permission does not list the permissions from namespace the table belongs to MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Mon, 23 May 2016 03:40:14 -0000 [ https://issues.apache.org/jira/browse/HBASE-15877?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] li xiang updated HBASE-15877: ----------------------------- Description: Re-create: 1. Get into hbase shell 2. create_namespace 'ns1' 3. grant 'u1', 'RWX', '@ns1' 4. create 'ns1:t1', 'cf11' 5. grant 'u2', 'RC', 'ns1:t1' 6. user_permission 'ns1:t1' The output of user_permission only lists u2 --------------------------- hbase(main):010:0* user_permission 'ns1:t1' User Namespace,Table,Family,Qualifier:Permission u2 ns1,ns1:t1,,: [Permission: actions=READ,CREATE] --------------------------- u1 should be listed because t1 belongs to ns1, and u1 has the permissions to access ns1 was: Re-create: 1. Get into hbase shell 2. create_namespace 'ns1' 3. grant 'u1', 'RWX', '@ns1' 4. create 'ns1:t1', 'cf11' 5. grant 'u2', 'RC', 'ns1:t1' 6. user_permission 'ns1:t1' The output of user_permission only lists u2 {code} hbase(main):010:0* user_permission 'ns1:t1' User Namespace,Table,Family,Qualifier:Permission u2 ns1,ns1:t1,,: [Permission: actions=READ,CREATE] (code} u1 should be listed because t1 belongs to ns1, and u1 has the permissions to access ns1 > user_permission does not list the permissions from namespace the table belongs to > --------------------------------------------------------------------------------- > > Key: HBASE-15877 > URL: https://issues.apache.org/jira/browse/HBASE-15877 > Project: HBase > Issue Type: Bug > Components: security > Affects Versions: 1.2.1 > Reporter: li xiang > Priority: Minor > > Re-create: > 1. Get into hbase shell > 2. create_namespace 'ns1' > 3. grant 'u1', 'RWX', '@ns1' > 4. create 'ns1:t1', 'cf11' > 5. grant 'u2', 'RC', 'ns1:t1' > 6. user_permission 'ns1:t1' > The output of user_permission only lists u2 > --------------------------- > hbase(main):010:0* user_permission 'ns1:t1' > User Namespace,Table,Family,Qualifier:Permission > u2 ns1,ns1:t1,,: [Permission: actions=READ,CREATE] > --------------------------- > u1 should be listed because t1 belongs to ns1, and u1 has the permissions to access ns1 -- This message was sent by Atlassian JIRA (v6.3.4#6332)