Repository: hbase
Updated Branches:
  refs/heads/master 735fe2002 -> 8793383b6


HBASE-12774 Fix the inconsistent permission checks for bulkloading. (Srikanth 
Srungarapu)


Project: http://git-wip-us.apache.org/repos/asf/hbase/repo
Commit: http://git-wip-us.apache.org/repos/asf/hbase/commit/8793383b
Tree: http://git-wip-us.apache.org/repos/asf/hbase/tree/8793383b
Diff: http://git-wip-us.apache.org/repos/asf/hbase/diff/8793383b

Branch: refs/heads/master
Commit: 8793383b66f06819b8d6d0070185d5bef29a66c8
Parents: 735fe20
Author: Enis Soztutar <[email protected]>
Authored: Wed Jan 21 17:03:55 2015 -0800
Committer: Enis Soztutar <[email protected]>
Committed: Wed Jan 21 17:03:55 2015 -0800

----------------------------------------------------------------------
 .../hadoop/hbase/security/access/AccessController.java    | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/hbase/blob/8793383b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
----------------------------------------------------------------------
diff --git 
a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
 
b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
index 48464f6..94f1419 100644
--- 
a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
+++ 
b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
@@ -1958,7 +1958,7 @@ public class AccessController extends 
BaseMasterAndRegionObserver
   }
 
   /**
-   * Verifies user has WRITE privileges on
+   * Verifies user has CREATE privileges on
    * the Column Families involved in the bulkLoadHFile
    * request. Specific Column Write privileges are presently
    * ignored.
@@ -2015,11 +2015,11 @@ public class AccessController extends 
BaseMasterAndRegionObserver
                                  PrepareBulkLoadRequest request) throws 
IOException {
     RegionCoprocessorEnvironment e = ctx.getEnvironment();
 
-    AuthResult authResult = hasSomeAccess(e, "prePrepareBulkLoad", 
Action.WRITE);
+    AuthResult authResult = hasSomeAccess(e, "prePrepareBulkLoad", 
Action.CREATE);
     logResult(authResult);
     if (!authResult.isAllowed()) {
       throw new AccessDeniedException("Insufficient permissions (table=" +
-        e.getRegion().getTableDesc().getTableName() + ", action=WRITE)");
+        e.getRegion().getTableDesc().getTableName() + ", action=CREATE)");
     }
   }
 
@@ -2035,11 +2035,11 @@ public class AccessController extends 
BaseMasterAndRegionObserver
                                  CleanupBulkLoadRequest request) throws 
IOException {
     RegionCoprocessorEnvironment e = ctx.getEnvironment();
 
-    AuthResult authResult = hasSomeAccess(e, "preCleanupBulkLoad", 
Action.WRITE);
+    AuthResult authResult = hasSomeAccess(e, "preCleanupBulkLoad", 
Action.CREATE);
     logResult(authResult);
     if (!authResult.isAllowed()) {
       throw new AccessDeniedException("Insufficient permissions (table=" +
-        e.getRegion().getTableDesc().getTableName() + ", action=WRITE)");
+        e.getRegion().getTableDesc().getTableName() + ", action=CREATE)");
     }
   }
 

Reply via email to