[ 
https://issues.apache.org/jira/browse/HBASE-9641?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13777220#comment-13777220
 ] 

Andrew Purtell commented on HBASE-9641:
---------------------------------------

It sounds like what you are asking for is role based access control, where you 
define a few roles, do grants to tables as appropriate, and then manage perms 
for individual users through role membership. We envisioned groups (especially 
as Hadoop group lookup is pluggable) as a way to achieve that without full-on 
RBAC as Matteo suggests. 
                
> We should have a way to provide table level based ACL.
> ------------------------------------------------------
>
>                 Key: HBASE-9641
>                 URL: https://issues.apache.org/jira/browse/HBASE-9641
>             Project: HBase
>          Issue Type: Improvement
>          Components: security
>            Reporter: Jean-Marc Spaggiari
>            Priority: Minor
>
> Today we can grant rights to users based on the user / table / column family 
> / family. When there is thousands of users and you want to add a new table, 
> it's long to add back everyone to the table.
> We should be able to provide a table based ACL. Something like "grant_table 
> <table_name> <rights> [ <column familiy> [ <column> ]]" to give specific 
> rights to a table for ALL the users.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to