[
https://issues.apache.org/jira/browse/HBASE-7254?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrew Purtell updated HBASE-7254:
----------------------------------
Component/s: (was: security)
(was: Coprocessors)
Affects Version/s: (was: 0.95.2)
0.98.0
Summary: Refactor AccessController ZK-mediated permissions cache
into a generic mechanism (was: Consider replacing AccessController ZK-mediated
permissions cache)
This came up in a review for HBASE-7663.
There are now two and potentially a third feature which implement their own ZK
mediated distributed cache: the AccessController, namespaces, and the
VisibilityController.
We should have a common mechanism.
I think there are a couple of reasons why it hasn't happened yet: it's easy to
copy the AC's example, we're not sure a replacement would be better or work
properly at first, and a bug that prevents proper functioning of security code
could become an embarrasing CVE. It needs someone to sit down, clear other
stuff, and focus.
> Refactor AccessController ZK-mediated permissions cache into a generic
> mechanism
> --------------------------------------------------------------------------------
>
> Key: HBASE-7254
> URL: https://issues.apache.org/jira/browse/HBASE-7254
> Project: HBase
> Issue Type: Task
> Affects Versions: 0.98.0
> Reporter: Andrew Purtell
> Assignee: Andrew Purtell
>
> After HBASE-5487 or HBASE-7212 goes in, we could replace the
> AccessController's permissions cache update via ZK using one of these more
> general frameworks, thus reducing functional duplication and code.
--
This message was sent by Atlassian JIRA
(v6.1#6144)
