hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Purtell (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-11013) Clone Snapshots on Secure Cluster Should provide option to apply Retained User Permissions
Date Tue, 16 May 2017 20:16:04 GMT

    [ https://issues.apache.org/jira/browse/HBASE-11013?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16013043#comment-16013043
] 

Andrew Purtell commented on HBASE-11013:
----------------------------------------

[~Apache9]
bq. Agree that AccessController should not be implement as a CP, or at least, not a CPEP...
Let me think if there is a quick way to reimplement it in a compatible way.

I promise you it won't be quick. We have existing JIRAs for reimplementing security as part
of core code. Please search first.

> Clone Snapshots on Secure Cluster Should provide option to apply Retained User Permissions
> ------------------------------------------------------------------------------------------
>
>                 Key: HBASE-11013
>                 URL: https://issues.apache.org/jira/browse/HBASE-11013
>             Project: HBase
>          Issue Type: Improvement
>          Components: snapshots
>            Reporter: Ted Yu
>            Assignee: Zheng Hu
>             Fix For: 2.0.0
>
>         Attachments: HBASE-11013.branch-1.1.v1.patch, HBASE-11013.branch-1.2.v1.patch,
HBASE-11013.branch-1.3.v1.patch, HBASE-11013.branch-1.v1.patch, HBASE-11013.master.addendum.patch,
HBASE-11013.v1.patch, HBASE-11013.v2.patch, HBASE-11013.v3.patch, HBASE-11013.v4.patch
>
>
> Currently,
> {code}
> sudo su - test_user
> create 't1', 'f1'
> sudo su - hbase
> snapshot 't1', 'snap_one'
> clone_snapshot 'snap_one', 't2'
> {code}
> In this scenario the user - test_user would not have permissions for the clone table
t2.
> We need to add improvement feature such that the permissions of the original table are
recorded in snapshot metadata and an option is provided for applying them to the new table
as part of the clone process.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message