Liu Shaohui created HBASE-12916:
-----------------------------------
Summary: No access control for replicating WAL entries
Key: HBASE-12916
URL: https://issues.apache.org/jira/browse/HBASE-12916
Project: HBase
Issue Type: Bug
Components: Replication
Affects Versions: 0.94.26, 2.0.0, 0.98.12
Reporter: Liu Shaohui
Assignee: Liu Shaohui
Currently, there is no access control for replicating WAL entries in secure
HBase cluster. Any authenticated user can write any data they want to any table
of a secure cluster by using the replication api.
Simple solution is to add permission check before replicating WAL entries. And
only user with global write permission can replicate WAL entries to this
cluster.
Another option is adding "Replication" action in hbase and only user with
"Replication" permission can replicate WAL entries to this cluster?
[~apurtell]
What's your suggestion? Thanks
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
