Deepak Sharma created RANGER-1226:
-------------------------------------
Summary: ranger policy is not working on the hbase namespaces
Key: RANGER-1226
URL: https://issues.apache.org/jira/browse/RANGER-1226
Project: Ranger
Issue Type: Bug
Components: Ranger
Affects Versions: 0.7.0
Reporter: Deepak Sharma
Priority: Critical
Fix For: 0.7.0
Scenario:
1. do grant for user 'user1' on default namespace as follows:
grant 'user1 , 'RWCA' , '@default'
2. then see at ranger side one policy gets created since this is grant operation
3. then try to create table in the same namesapce , even by default it will go
in default namespace
{code}
hbase(main):001:0> create 't1' , 'c1'
ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient
permissions for user '[email protected]' (action=create)
hbase(main):002:0> create 'default:t1' , 'c1'
ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient
permissions for user '[email protected]' (action=create)
{code}
issue: even if permission is there, then also creation of table fails.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
