On Wed, Nov 28, 2018 at 7:22 AM Stack <st...@duboce.net> wrote: > On Tue, Nov 27, 2018 at 11:04 AM Lars Francke <lars.fran...@gmail.com> > wrote: > > > Hi, > > > > I have a use-case for a customer who's looking to build an audit tool. > This > > audit tool should build a report of all authorizations across various > > products. HBase is one of them. > > > > Unfortunately in HBase it's not currently possible to list all ACLs > without > > going directly to the _hbase:acl_ table (unless I'm missing something, > > which would be great). > > > > I see that the AccessControlLists class has a loadAll method but it's not > > exposed anywhere. > > > > Are there any objections in adding a method to retrieve all ACLs across > all > > tables etc.? I'm not yet 100% sure on the permissions that should be > > required to do this. Any opinions? > > Global + Access or something similar? > > > > > Yeah. Not surprised given this an 'internal' table. > > As long as there are perms on access to your new method, should be good to > add. Anything else would be a hack I'd say Lars (reading the echo of loaded > ACLs out to zk... or trying to read the 'internal' acl table yourself) >
Thanks! I agree on other methods being a hack (and relying on implementation details). Perfect. In that case I'll propose the solution for my client hoping he'll sponsor the work. Cheers, Lars > Thanks, > S > > > > > Cheers, > > Lars > > >
