From dev-return-56392-archive-asf-public=cust-asf.ponee.io@phoenix.apache.org Tue May 7 21:35:02 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id B254E18064C for ; Tue, 7 May 2019 23:35:01 +0200 (CEST) Received: (qmail 80144 invoked by uid 500); 7 May 2019 21:35:01 -0000 Mailing-List: contact dev-help@phoenix.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@phoenix.apache.org Delivered-To: mailing list dev@phoenix.apache.org Received: (qmail 80119 invoked by uid 99); 7 May 2019 21:35:01 -0000 Received: from mailrelay1-us-west.apache.org (HELO mailrelay1-us-west.apache.org) (209.188.14.139) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 07 May 2019 21:35:00 +0000 Received: from jira-lw-us.apache.org (unknown [207.244.88.139]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id 5A6E0E0371 for ; Tue, 7 May 2019 21:35:00 +0000 (UTC) Received: from jira-lw-us.apache.org (localhost [127.0.0.1]) by jira-lw-us.apache.org (ASF Mail Server at jira-lw-us.apache.org) with ESMTP id 179A225813 for ; Tue, 7 May 2019 21:35:00 +0000 (UTC) Date: Tue, 7 May 2019 21:35:00 +0000 (UTC) From: "Chinmay Kulkarni (JIRA)" To: dev@phoenix.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Created] (PHOENIX-5274) ConnectionQueryServiceImpl#ensureNamespaceCreated and ensureTableCreated should use HBase APIs that do not require ADMIN permissions for existence checks MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 Chinmay Kulkarni created PHOENIX-5274: ----------------------------------------- Summary: ConnectionQueryServiceImpl#ensureNamespaceCreated and ensureTableCreated should use HBase APIs that do not require ADMIN permissions for existence checks Key: PHOENIX-5274 URL: https://issues.apache.org/jira/browse/PHOENIX-5274 Project: Phoenix Issue Type: Improvement Affects Versions: 5.0.0, 4.15.0, 4.14.2 Reporter: Chinmay Kulkarni Assignee: Chinmay Kulkarni Fix For: 4.15.0, 4.14.2, 5.0.0 [HBASE-22377|https://issues.apache.org/jira/browse/HBASE-22377] will introduce a new API that does not require ADMIN permissions to check the existence of a namespace. Currently, CQSI#ensureNamespaceCreated calls HBaseAdmin#getNamespaceDescriptor which eventually on the server causes a call to AccessController#preGetNamespaceDescriptor. This tries to acquire ADMIN permissions on the namespace. We should ideally use the new API provided by HBASE-22377 which does not require the phoenix client to get ADMIN permissions on the namespace. We should acquire ADMIN permissions only in case we need to create the namespace if it doesn't already exist. Similarly, CQSI#ensureTableCreated should first check the existence of a table before trying to do HBaseAdmin#getTableDescriptor since this requires CREATE and ADMIN permissions. -- This message was sent by Atlassian JIRA (v7.6.3#76005)