On Tue, Nov 27, 2018 at 11:04 AM Lars Francke <lars.fran...@gmail.com> wrote:
> Hi, > > I have a use-case for a customer who's looking to build an audit tool. This > audit tool should build a report of all authorizations across various > products. HBase is one of them. > > Unfortunately in HBase it's not currently possible to list all ACLs without > going directly to the _hbase:acl_ table (unless I'm missing something, > which would be great). > > I see that the AccessControlLists class has a loadAll method but it's not > exposed anywhere. > > Are there any objections in adding a method to retrieve all ACLs across all > tables etc.? I'm not yet 100% sure on the permissions that should be > required to do this. Any opinions? > Global + Access or something similar? > > Yeah. Not surprised given this an 'internal' table. As long as there are perms on access to your new method, should be good to add. Anything else would be a hack I'd say Lars (reading the echo of loaded ACLs out to zk... or trying to read the 'internal' acl table yourself). Thanks, S > Cheers, > Lars >
