Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Date: Mon, 16 Jan 2017 09:34:26 +0000 (UTC)
From: "Weizhan Zeng (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.13035094.1484540113000.13993.1484559266513@Atlassian.JIRA>
In-Reply-To: <JIRA.13035094.1484540113000@Atlassian.JIRA>
References: <JIRA.13035094.1484540113000@Atlassian.JIRA> <JIRA.13035094.1484540113277@jira-lw-us.apache.org>
Subject: [jira] [Comment Edited] (HBASE-17472) Correct the semantic of
  permission grant
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Mon, 16 Jan 2017 09:34:33 -0000


    [ https://issues.apache.org/jira/browse/HBASE-17472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15823684#comment-15823684 ] 

Weizhan Zeng edited comment on HBASE-17472 at 1/16/17 9:33 AM:
---------------------------------------------------------------

+ 1

  >1. Grant command add (not replace) one or more action(s) for a user; 
  > 2. Revoke command remove one or more action(s) for a user.

look more reasonable


was (Author: weizhan zeng):
+1  
> 1. Grant command add (not replace) one or more action(s) for a user; 
   2. Revoke command remove one or more action(s) for a user.

look more reasonable

> Correct the semantic of  permission grant
> -----------------------------------------
>
>                 Key: HBASE-17472
>                 URL: https://issues.apache.org/jira/browse/HBASE-17472
>             Project: HBase
>          Issue Type: Improvement
>          Components: Admin
>            Reporter: huzheng
>            Assignee: huzheng
>
> Currently, HBase grant operation has following semantic:
> {code}
> hbase(main):019:0> grant 'hbase_tst', 'RW', 'ycsb'
> 0 row(s) in 0.0960 seconds
> hbase(main):020:0> user_permission 'ycsb'
> User                                                         Namespace,Table,Family,Qualifier:Permission                                                                                                                                                                                                                                               
>  hbase_tst                                                   default,ycsb,,: [Permission:actions=READ,WRITE]                                                                                                                                                                                                           
> 1 row(s) in 0.0550 seconds
> hbase(main):021:0> grant 'hbase_tst', 'CA', 'ycsb'
> 0 row(s) in 0.0820 seconds
> hbase(main):022:0> user_permission 'ycsb'
> User                                                         Namespace,Table,Family,Qualifier:Permission                                                                                                                                       
>  hbase_tst                                                   default,ycsb,,: [Permission: actions=CREATE,ADMIN]                                                                                                                                
> 1 row(s) in 0.0490 seconds
> {code}  
> Later permission will replace previous granted permissions, which confused most of HBase administrator.
> It's seems more reasonable that HBase merge multiple granted permission.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)