[
https://issues.apache.org/jira/browse/HBASE-6030?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrew Purtell resolved HBASE-6030.
-----------------------------------
Resolution: Not a Problem
Assignee: (was: Andrew Purtell)
> Log AccessDeniedExceptions at INFO level
> ----------------------------------------
>
> Key: HBASE-6030
> URL: https://issues.apache.org/jira/browse/HBASE-6030
> Project: HBase
> Issue Type: Improvement
> Components: Coprocessors, security
> Affects Versions: 0.92.2, 0.94.1, 0.95.2
> Environment: AccessController coprocessor
> Reporter: Andrew Purtell
> Priority: Minor
>
> The HBase AccessController can emit a detailed trace of every action, and
> whether it succeeded or failed, but this is expected to be used only for
> debugging an application in a staging environment. In production a
> RegionServer may have thousands of requests per second, logging the audit
> trace just isn't viable. However, we might want to log the
> AccessDeniedExceptions which result from access failures in the daemon logs
> like Hadoop does, e.g. the NameNode log.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
