Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Date: Thu, 16 Feb 2017 01:25:41 +0000 (UTC)
From: "Duo Zhang (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.13035094.1484540113000.93272.1487208341693@Atlassian.JIRA>
In-Reply-To: <JIRA.13035094.1484540113000@Atlassian.JIRA>
References: <JIRA.13035094.1484540113000@Atlassian.JIRA> <JIRA.13035094.1484540113277@jira-lw-us.apache.org>
Subject: [jira] [Commented] (HBASE-17472) Correct the semantic of
  permission grant
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Thu, 16 Feb 2017 01:25:46 -0000


    [ https://issues.apache.org/jira/browse/HBASE-17472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15868939#comment-15868939 ] 

Duo Zhang commented on HBASE-17472:
-----------------------------------

Oh sorry, in the patch here we already have a mergeExistingPermissions flag... So let's just remove the grant2 method.

> Correct the semantic of  permission grant
> -----------------------------------------
>
>                 Key: HBASE-17472
>                 URL: https://issues.apache.org/jira/browse/HBASE-17472
>             Project: HBase
>          Issue Type: Improvement
>          Components: Admin
>    Affects Versions: 2.0.0
>            Reporter: huzheng
>            Assignee: huzheng
>             Fix For: 2.0.0
>
>         Attachments: HBASE-17472.v1.patch, HBASE-17472.v2.patch, HBASE-17472.v3.patch, HBASE-17472.v4.patch, HBASE-17472.v5.patch
>
>
> Currently, HBase grant operation has following semantic:
> {code}
> hbase(main):019:0> grant 'hbase_tst', 'RW', 'ycsb'
> 0 row(s) in 0.0960 seconds
> hbase(main):020:0> user_permission 'ycsb'
> User                                                         Namespace,Table,Family,Qualifier:Permission                                                                                                                                                                                                                                               
>  hbase_tst                                                   default,ycsb,,: [Permission:actions=READ,WRITE]                                                                                                                                                                                                           
> 1 row(s) in 0.0550 seconds
> hbase(main):021:0> grant 'hbase_tst', 'CA', 'ycsb'
> 0 row(s) in 0.0820 seconds
> hbase(main):022:0> user_permission 'ycsb'
> User                                                         Namespace,Table,Family,Qualifier:Permission                                                                                                                                       
>  hbase_tst                                                   default,ycsb,,: [Permission: actions=CREATE,ADMIN]                                                                                                                                
> 1 row(s) in 0.0490 seconds
> {code}  
> Later permission will replace previous granted permissions, which confused most of HBase administrator.
> It's seems more reasonable that HBase merge multiple granted permission.


--
This message was sent by Atlassian JIRA
(v6.3.15#6346)