lujie created HBASE-25407:
-----------------------------
Summary: list_regions make potential sensitive information
disclosure
Key: HBASE-25407
URL: https://issues.apache.org/jira/browse/HBASE-25407
Project: HBase
Issue Type: Bug
Reporter: lujie
Attachments: image-2020-12-18-13-00-20-126.png
I found that I can get other users' region information which is not expected.
For example i create a table as sysadmin, then I can read the region
information as user1.
!image-2020-12-18-13-00-20-126.png!
I have found that list_regions is introduced by
https://issues.apache.org/jira/browse/HBASE-14925
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
