Repository: ranger Updated Branches: refs/heads/master 1a5eba446 -> a0b11d621
RANGER-1960 : HBase auth does not take table namespace into consideration for deleting snapshot Project: http://git-wip-us.apache.org/repos/asf/ranger/repo Commit: http://git-wip-us.apache.org/repos/asf/ranger/commit/a0b11d62 Tree: http://git-wip-us.apache.org/repos/asf/ranger/tree/a0b11d62 Diff: http://git-wip-us.apache.org/repos/asf/ranger/diff/a0b11d62 Branch: refs/heads/master Commit: a0b11d6217312dcf43effbb91792c3ef370572f4 Parents: 1a5eba4 Author: rmani <rm...@hortonworks.com> Authored: Mon Jan 22 17:09:45 2018 -0800 Committer: rmani <rm...@hortonworks.com> Committed: Mon Jan 22 17:09:45 2018 -0800 ---------------------------------------------------------------------- .../ranger/authorization/hbase/RangerAuthorizationCoprocessor.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ranger/blob/a0b11d62/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java ---------------------------------------------------------------------- diff --git a/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java b/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java index 3b38d02..e30f795 100644 --- a/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java +++ b/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java @@ -806,7 +806,7 @@ public class RangerAuthorizationCoprocessor extends RangerAuthorizationCoprocess } @Override public void preDeleteSnapshot(ObserverContext<MasterCoprocessorEnvironment> ctx, SnapshotDescription snapshot) throws IOException { - requirePermission("deleteSnapshot", Permission.Action.ADMIN); + requirePermission("deleteSnapshot", snapshot.getTableBytes().toByteArray(), Permission.Action.ADMIN); } @Override public void preDeleteTable(ObserverContext<MasterCoprocessorEnvironment> c, TableName tableName) throws IOException {
