[
https://issues.apache.org/jira/browse/HBASE-10226?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13856139#comment-13856139
]
Andrew Purtell commented on HBASE-10226:
----------------------------------------
Anoop pointed out group checking isn't checking namespace grants either.
Updated JIRA title. New patches coming soon.
> Namespace grants not always checked
> -----------------------------------
>
> Key: HBASE-10226
> URL: https://issues.apache.org/jira/browse/HBASE-10226
> Project: HBase
> Issue Type: Bug
> Components: security
> Affects Versions: 0.98.0, 0.96.2, 0.99.0
> Reporter: Andrew Purtell
> Assignee: Andrew Purtell
> Priority: Critical
> Fix For: 0.98.0, 0.99.0
>
> Attachments: 10226-0.96.patch, 10226-0.96.patch, 10226.patch,
> 10226.patch
>
>
> Namespace grants for a user are supposed to supercede table level
> permissions, a middle tier between table grants and global grants. We are not
> always checking.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
