Currently you can create a HBase native table, apply security policy, and then create a view over the HBase table; or you can create a Phoenix table, then switch over to the HBase shell, and grant or revoke access on the HBase tables that Phoenix created. (Could be multiple tables if you created indexes in your DDL.) The HBase online manual first discusses how to set up secure authentication: http://hbase.apache.org/book.html#security. Then, securing access to table data, based on secure authentication: http://hbase.apache.org/book.html#_securing_access_to_your_data
At the Phoenix level this could be made a lot more convenient. I'm reminded of https://issues.apache.org/jira/browse/PHOENIX-672. We didn't have follow through before but could revive it. On Wed, Jul 8, 2015 at 2:29 PM, James Taylor <[email protected]> wrote: > The option that Anil mentioned is a good one - use HBase security to > restrict table access. You'd need to setup the security using HBase APIs in > this case, but Phoenix would respect those (as it's just another client as > far as HBase is concerned). > > A couple more options include: > - Call Connection.setReadOnly(true) on your connection to restrict the > client to only read-only operations > - Use views directly over HBase tables [1] > > Thanks, > James > > [1] > > http://phoenix.apache.org/faq.html#How_I_map_Phoenix_table_to_an_existing_HBase_table > > On Wed, Jul 8, 2015 at 1:46 PM, anil gupta <[email protected]> wrote: > > > If your HBase cluster is secure then you can restrict access by using > > HBase security. Phoenix supports connecting to secure HBase cluster. > > > > On Wed, Jul 8, 2015 at 1:01 PM, Chris Hill <[email protected]> wrote: > > > > > I’m wondering if there is a way to restrict access to specific tables > or > > > at least restrict write access to them via a phoenix connection? > > > > > > > > > > > > I’m suspicious the answer is no, but I thought I better ask to be sure. > > > > > > > > > > > > > > > *Chris Hill *Senior Software Developer > > > *Brightspace by D2L (Desire2Learn Incorporated)* > > > 1-519-772-0325 > > > [email protected] > > > www.brightspace.com > > > > > > > > > > > > > > > > > -- > > Thanks & Regards, > > Anil Gupta > > > -- Best regards, - Andy Problems worthy of attack prove their worth by hitting back. - Piet Hein (via Tom White)
